Stored Run Record

Run #2852

Completed Oct 9, 2026, 01:00:46 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445Open
privatemode-secret-handshakeapplication/json360300a527a4f0edaf41f9b561df311b58f833afe9445bea71ce8ec7e4f6f71cad9Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18487c0bdf1e8b193fa7688b0284ac3cfdae655a7c2c126fc183e2dd790318fde72Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-09T01:00:32.722627129+00:00",
  "latency_ms": 3753,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "52d452dcb294a9a3dc07c1641a58b382cc4c2edd138596aba4fecf96d4aa70160000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "2060adc79890fe75f3d84041a10bd08d71bd04f8c3e40bd73800eaf7399e2049",
    "artifact_set_digest": "67ccab65b21756d186e0adbbbf1a546d283b88e2509eade72e61b1e2d63a3900"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:35.628092643+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507632728",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:36 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:36.263948442+00:00",
      "sha256": "87c0bdf1e8b193fa7688b0284ac3cfdae655a7c2c126fc183e2dd790318fde72",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:36.264739737+00:00",
      "sha256": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:36.419257917+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "300a527a4f0edaf41f9b561df311b58f833afe9445bea71ce8ec7e4f6f71cad9",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:36.476024571+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36006477d85e2f6eea007ab8714a9b2283d7de6c8a36ce96f8b77e406c9c684460aOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1842648f5f7966a90227c2f7a7af0cd72f62a3cbebea81547ec4501d73230c9de7dOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-09T01:00:36.476478974+00:00",
  "latency_ms": 968,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "f055cd6e4cce46ad7ba4bbbd4bbc7687799dac94fb5c8473d771a8745d4b7c360000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "287c6de441af8528970b92aa0dd21794539f9476de5b7f2dead7ccd18ab715bb",
    "artifact_set_digest": "1ee763f4b6dabd8ddca1fc429ec731a3e1330d47d66be9abaaaca02a05e6188e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:36.605922420+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507636479",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:37 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:37.246322777+00:00",
      "sha256": "2648f5f7966a90227c2f7a7af0cd72f62a3cbebea81547ec4501d73230c9de7d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:37.247075029+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:37.395627424+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "06477d85e2f6eea007ab8714a9b2283d7de6c8a36ce96f8b77e406c9c684460a",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:37.444557353+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json3607c454723d4eb1851bd7cbe1fc7b503a2a53dece922b7675cb68924fc8904ceb3Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184e57c561f6999f1eecfd4bee4e11395ff021f3e1be4008a37a8bdc66f95ff073aOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-09T01:00:37.444960209+00:00",
  "latency_ms": 1003,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "240810746f7fac28dc473d8b66cdcd28e2f920efd7d799e0f173c9c43b58259b0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "94840c0c574ab87aa8771320439eddb7f0f304ff0bd29f5a19b8019d9beec1c1",
    "artifact_set_digest": "77ead4a8da6af41e53930405116dbd3f6af4b6a00ebf8780b7ccf5fdd6bd879c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:37.583301952+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507637447",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:38 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:38.245921555+00:00",
      "sha256": "e57c561f6999f1eecfd4bee4e11395ff021f3e1be4008a37a8bdc66f95ff073a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:38.246871077+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:38.394528332+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "7c454723d4eb1851bd7cbe1fc7b503a2a53dece922b7675cb68924fc8904ceb3",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:38.448355500+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json3603c5b6eaf93f11dc196faaf3a650671bd2ca0f12143f27c49b6d9ed3e4b2dcb29Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1840dee18204ac79324073092a86bdcbc12b3981661a05a11ed1a2c2330f700c21fOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-09T01:00:38.448709935+00:00",
  "latency_ms": 944,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "b0a6f4e9b353cffc29ecd354d7911ad6a8b5c76c49d3aca4d4ac27f9a9fe96eb0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "c38617dbcbe9ddaca9b5f8af4f5218fd8fc8b77d46d1cd703f37067d4453752c",
    "artifact_set_digest": "ee57557c5adba8b7f087a43c2cc944ca5dac3da2093a83e3d1b241a2a240db9f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:38.570387398+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507638451",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:39 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:39.196582228+00:00",
      "sha256": "0dee18204ac79324073092a86bdcbc12b3981661a05a11ed1a2c2330f700c21f",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:39.197354818+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:39.341271694+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "3c5b6eaf93f11dc196faaf3a650671bd2ca0f12143f27c49b6d9ed3e4b2dcb29",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:39.393191143+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json3606397fe9460782be26c342d8b1165e38e9ead56efb4daa37f0f7dca705fbdad61Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184cad482899e5fa3892de3b465e4e919bb5425ae8ffe04e1e8aaaa8355398be0f0Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-09T01:00:39.393538284+00:00",
  "latency_ms": 960,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "3ff293df3fe8478488e81f9e32647da5d275e25fb8d7072f6476dfd2a3a2c6690000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "b65b39c1654850f083c2e84a44875a75bb2ec3ee156b91dfa278b5fb78810505",
    "artifact_set_digest": "f5bf823c3430d42c15257e9728d4dc80df143ad27883a2ed09f8efa0d9d4089f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:39.519201937+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507639396",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:40 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:40.150782614+00:00",
      "sha256": "cad482899e5fa3892de3b465e4e919bb5425ae8ffe04e1e8aaaa8355398be0f0",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:40.151560093+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:40.300189742+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "6397fe9460782be26c342d8b1165e38e9ead56efb4daa37f0f7dca705fbdad61",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:40.353538884+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445Open
privatemode-secret-handshakeapplication/json360bed8a4fb4d4c6d85949c96c0b0b778f5cd81c432e29462dcbfa5fc31806c7b12Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846eb246f8869a4663ee9b33de9a950ca8f8322dd84a92a41fe8585dea62132552Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-09T01:00:40.353904961+00:00",
  "latency_ms": 1050,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "f0a39a492c6f3a3b782a5eca87fda7e60a3d418abde3a23c82614745402bfe2d0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "90f896120413682a778fe59b228b5f3fbfda4e27be92df1ec546ab068fca409e",
    "artifact_set_digest": "eb403e4042e3014581815d71c596d3e564a2a5a877883645f6c3b7eab1228e99"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:40.475394531+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507640356",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:41 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:41.191149064+00:00",
      "sha256": "6eb246f8869a4663ee9b33de9a950ca8f8322dd84a92a41fe8585dea62132552",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:41.191977258+00:00",
      "sha256": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:41.345123734+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "bed8a4fb4d4c6d85949c96c0b0b778f5cd81c432e29462dcbfa5fc31806c7b12",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:41.403632337+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445Open
privatemode-secret-handshakeapplication/json36014a14be9368f619cd6d23a99f23795a477417f1e3ffe1baccf520ddf900b5f79Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18462e351e8ec3dc11797afa953673bfb881eceeec26e9eb28c753761d5b0c116feOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-09T01:00:41.403983797+00:00",
  "latency_ms": 1042,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "b03656201a67690a91e453f1cd5cc8c5d2ffb142581f5acc951f16507bf8576a0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "8d90a01c4ed4e3bbcde1e366660a1765042c542d68dd4fe38c09627cd2a2ac1c",
    "artifact_set_digest": "01097bdf387fd3ad3fdebe80af19fb33a9dfb4de9967cd8a1134e7f01808d0a9"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:41.520419493+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507641406",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:42 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:42.234606604+00:00",
      "sha256": "62e351e8ec3dc11797afa953673bfb881eceeec26e9eb28c753761d5b0c116fe",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:42.235373253+00:00",
      "sha256": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:42.388355651+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "14a14be9368f619cd6d23a99f23795a477417f1e3ffe1baccf520ddf900b5f79",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:42.445691954+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json360c11b7645290ebd652bb6930760a98f66c2dfcb26dbe1bf750255f0a488bbb821Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18464715a2b6f04b6a616d1d3a39adfdb52930d7527ef9b8596323da0627ab17a8eOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-09T01:00:42.446202362+00:00",
  "latency_ms": 949,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "17160e96da44e52bca8e3cc0fc9de9c51a57597091b6361f550707f5a4a504f40000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "9a869e222bf53cb4a3ec7b12dfc9159aca06be74999f13bf413ca21a84e6f1a4",
    "artifact_set_digest": "3d3c44cd23dd64e47ef8a7347d3fc33c685e0c24964d8ae47ff2f3645014f25a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:42.561180433+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507642448",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:43 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:43.191465078+00:00",
      "sha256": "64715a2b6f04b6a616d1d3a39adfdb52930d7527ef9b8596323da0627ab17a8e",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:43.192213482+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:43.340165180+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "c11b7645290ebd652bb6930760a98f66c2dfcb26dbe1bf750255f0a488bbb821",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:43.395007223+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360d6cd2995a615ed0830f5955f64ace55dafd466754ae0fbf2b3c3ba79c5e2653eOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184012be0a09147b0907d66a52a93d4786b0756cae265c15a39d0936d3c2e7ccf87Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-09T01:00:43.395350828+00:00",
  "latency_ms": 1015,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "c5916dc3b7db8463df91b7fba0f9ff5815a711e43e6dac2c0ab1250e446ddbb30000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "5b146f6ebfd52ae8f660d8683e4757065b1797215615220637e101b821dc37e1",
    "artifact_set_digest": "4c68dbaa5f5d31328c535da991ce0119e6a81a612064a4ea983f9d193faff098"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:43.528825378+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507643397",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:44 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:44.203408671+00:00",
      "sha256": "012be0a09147b0907d66a52a93d4786b0756cae265c15a39d0936d3c2e7ccf87",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:44.204153769+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:44.355676949+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "d6cd2995a615ed0830f5955f64ace55dafd466754ae0fbf2b3c3ba79c5e2653e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:44.410317825+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445Open
privatemode-secret-handshakeapplication/json36074ccbf716a4c81d8e94845d81281187b62a0f2f32499369361f75589f0c56f33Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1844b8f3188c3b58beba33567054cc01658a057cd0446014fdd9e58c360cac08dd9Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-09T01:00:44.410670036+00:00",
  "latency_ms": 992,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "e6108e199bcc09bebd2cf34a5f6da07b7a6432e5f3de6ad5d5dce82397beeedd0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "7a934f93f30694a632d7cfba0a951bbc5702f20f69e8bb3523f063ea604f5e4a",
    "artifact_set_digest": "1131e5735866fbfe80207eb5a91a2c717b136039b5d6ec1599dde6bf1e1423aa"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:44.531493245+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507644413",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:45 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:45.196779312+00:00",
      "sha256": "4b8f3188c3b58beba33567054cc01658a057cd0446014fdd9e58c360cac08dd9",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:45.197525752+00:00",
      "sha256": "dc8a898ef84cfa28157f47e119d8a73c78427fc66f310c632f210bccc3728445",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:45.348026223+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "74ccbf716a4c81d8e94845d81281187b62a0f2f32499369361f75589f0c56f33",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:45.402618006+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360d335a6493cabf1b0f9f9a7467d8cbd5f8d7a255def63c8a9a5b07d288f994cbdOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18431be541263e72e7bcfa1972a325d58bd852b8efb0f420c3dc8c203e840178f79Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-09T01:00:45.403028537+00:00",
  "latency_ms": 929,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "ec9c3415767612445dee5c5c429d4b70d26f5eba164a3e5676b1b40278336fe60000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "56cdd61355fb3475e4d657e51b69554572e4dd0217273879258690df4cefcbf8",
    "artifact_set_digest": "55d01dc2e346df2af14acdacba59d383683da66952cb23d34806f2035a80b773"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-09T01:00:45.517921698+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791507645405",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Fri, 09 Oct 2026 01:00:46 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-09T01:00:46.134287093+00:00",
      "sha256": "31be541263e72e7bcfa1972a325d58bd852b8efb0f420c3dc8c203e840178f79",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-09T01:00:46.135052740+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-09T01:00:46.281953535+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "d335a6493cabf1b0f9f9a7467d8cbd5f8d7a255def63c8a9a5b07d288f994cbd",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-09T01:00:46.331766070+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}