Tinfoil
gemma4-31b
Gemma 4 31B
Captured evidence
| Kind | Type | Bytes | SHA-256 | Artifact |
|---|---|---|---|---|
| amd-vcek-certificate | application/pkix-cert | 1,347 | 52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85 | Open |
| provider-attestation-response | application/json | 605 | a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3 | Open |
| provider-ehbp-keys-response | application/ohttp-keys | 41 | 48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281 | Open |
| provider-inference-probe-response | application/json | 668 | c33ef4bb288e6340e785611113d27795a2f97a1edb1edf831a4b77fb73262ab8 | Open |
| provider-inference-route-headers | text/plain; charset=utf-8 | 182 | d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252 | Open |
| sev-snp-report | application/vnd.amd.sev-snp.report | 1,184 | 59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6 | Open |
| tls-leaf-certificate | application/pkix-cert | 895 | 35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03 | Open |
| verification-error | text/plain; charset=utf-8 | 221 | 300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b | Open |
Sanitized target
{
"provider": "tinfoil",
"id": "tinfoil-gemma4",
"label": "Gemma 4 31B",
"type": "tinfoil",
"url": "https://inference.tinfoil.sh/",
"host": "inference.tinfoil.sh",
"model": "gemma4-31b",
"metadata": {
"model_repo": "tinfoilsh/confidential-gemma4-31b",
"repo": "tinfoilsh/confidential-model-router"
}
}Parsed decision JSON
{
"provider": "tinfoil",
"id": "tinfoil-gemma4",
"label": "Gemma 4 31B",
"model": "gemma4-31b",
"status": "partial",
"ts": "2026-10-07T12:44:06.302857548+00:00",
"latency_ms": 3642,
"error": "Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain",
"snp": {
"chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
"report_data": "2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
"measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
"family_id": "00000000000000000000000000000000",
"image_id": "00000000000000000000000000000000",
"generation": "Genoa",
"current_tcb": "bl=10 tee=0 snp=23 ucode=84",
"reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
"policy_bits": 196608,
"platform_smt": true,
"platform_tsme": true,
"debug_allowed": false,
"vcek_fingerprint": "52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"
},
"images_verified": true,
"tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
"tls_matches": false,
"version": "v0.0.155",
"report_data_binds_signer": true,
"sigstore_match": true,
"sigstore_bundle_verified": true,
"sigstore_tag": "v0.0.155",
"release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
"sigstore_repo": "tinfoilsh/confidential-model-router",
"backend_host": "gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev",
"config_images": [
"ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
"ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
],
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"e2ee_public_key": "6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
"e2ee_key_algo": "hpke",
"trust_tier": "app-e2ee",
"e2ee_capability": "hpke",
"route": {
"route_binding": "verified",
"router": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
},
"workload_operator": {
"organization": "tinfoil",
"confidence": "declared",
"evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
},
"tee_platform": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
},
"deployment_id": "gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev",
"upstream_model": "gemma4-31b"
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "not-proven",
"detail": "No verifier-owned challenge binding was exposed."
},
"channel": {
"state": "verified",
"detail": "The application channel key is bound to attested evidence."
},
"workload": {
"state": "not-proven",
"detail": "No expected workload measurement was verified."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "verified",
"detail": "A request-bound route receipt was verified."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
"target_hash": "e4e8b9e8b2257585c72aae4a642c887f43b097bc6bf377b5420a99e8c7b97971",
"parsed_evidence_digest": "0a13ea02a49c41994355988ec49c4ae638b0044ba617010a74aedcbfa4a172ed",
"artifact_set_digest": "d5ee31bd04570cd2cf7c806647bc29d607d81424c99136b68f8a8ef0aaa2285f"
},
"evidence_artifacts": [
{
"kind": "provider-attestation-response",
"media_type": "application/json",
"collected_at": "2026-10-07T12:44:06.782714514+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3",
"size_bytes": 605,
"encoding": "binary",
"metadata": {
"date": "Wed, 07 Oct 2026 12:44:08 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "sev-snp-report",
"media_type": "application/vnd.amd.sev-snp.report",
"collected_at": "2026-10-07T12:44:06.941881402+00:00",
"sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
"size_bytes": 1184,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh"
}
},
{
"kind": "amd-vcek-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-10-07T12:44:06.943011042+00:00",
"source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
"sha256": "52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85",
"size_bytes": 1347,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh",
"product": "Genoa",
"source": "amd-kds"
}
},
{
"kind": "tls-leaf-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-10-07T12:44:07.634023661+00:00",
"source_url": "https://inference.tinfoil.sh/",
"sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
"size_bytes": 895,
"encoding": "binary",
"metadata": {
"host": "inference.tinfoil.sh"
}
},
{
"kind": "provider-ehbp-keys-response",
"media_type": "application/ohttp-keys",
"collected_at": "2026-10-07T12:44:09.596641179+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
"sha256": "48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281",
"size_bytes": 41,
"encoding": "binary",
"metadata": {
"date": "Wed, 07 Oct 2026 12:44:10 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "provider-inference-probe-response",
"media_type": "application/json",
"collected_at": "2026-10-07T12:44:09.944185728+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "c33ef4bb288e6340e785611113d27795a2f97a1edb1edf831a4b77fb73262ab8",
"size_bytes": 668,
"encoding": "binary",
"metadata": {
"date": "Wed, 07 Oct 2026 12:44:21 GMT",
"http_method": "POST",
"http_status": "200"
}
},
{
"kind": "provider-inference-route-headers",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-10-07T12:44:09.944242194+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252",
"size_bytes": 182,
"encoding": "binary",
"metadata": {
"model": "gemma4-31b"
}
},
{
"kind": "verification-error",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-10-07T12:44:09.944534372+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b",
"size_bytes": 221,
"encoding": "utf-8",
"metadata": {
"check_id": "tinfoil-gemma4",
"provider": "tinfoil",
"status": "partial"
}
}
]
}