PPQ.AI
private/deepseek-v4-1-flash
DeepSeek V4.1 Flash (TEE)
Captured evidence
| Kind | Type | Bytes | SHA-256 | Artifact |
|---|---|---|---|---|
| amd-vcek-certificate | application/pkix-cert | 1,347 | 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 | Open |
| provider-attestation-response | application/json | 26,025 | fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e | Open |
| sev-snp-report | application/vnd.amd.sev-snp.report | 1,184 | 1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491 | Open |
| source-provenance-response | application/json; charset=utf-8 | 6,007 | 046dd6fb8d1276f85069ecaf88aa9e0a71d626b7b3964204636d8041ab1adec3 | Open |
| verification-error | text/plain; charset=utf-8 | 248 | bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6 | Open |
Sanitized target
{
"provider": "ppq",
"id": "ppq-deepseek-v4-1-flash",
"label": "DeepSeek V4.1 Flash (TEE)",
"type": "ppq",
"url": "https://api.ppq.ai/private",
"host": "api.ppq.ai",
"model": "private/deepseek-v4-1-flash",
"metadata": {
"repo": "tinfoilsh/confidential-model-router"
}
}Parsed decision JSON
{
"provider": "ppq",
"id": "ppq-deepseek-v4-1-flash",
"label": "DeepSeek V4.1 Flash (TEE)",
"model": "private/deepseek-v4-1-flash",
"status": "partial",
"ts": "2026-10-10T19:00:29.362917803+00:00",
"latency_ms": 2823,
"error": "Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
"snp": {
"chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
"report_data": "c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243",
"measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
"family_id": "00000000000000000000000000000000",
"image_id": "00000000000000000000000000000000",
"generation": "Genoa",
"current_tcb": "bl=10 tee=0 snp=23 ucode=84",
"reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
"policy_bits": 196608,
"platform_smt": true,
"platform_tsme": true,
"debug_allowed": false,
"vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
},
"images_verified": true,
"report_data_binds_signer": true,
"sigstore_match": true,
"sigstore_bundle_verified": true,
"sigstore_tag": "v0.0.155",
"release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
"sigstore_repo": "tinfoilsh/confidential-model-router",
"certificate_domain_matches": true,
"certificate_binds_hpke": true,
"certificate_binds_attestation": true,
"router_config_images": [
"ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
"ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
],
"config_images": [
"ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
"ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
],
"source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
"e2ee_public_key": "b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243",
"e2ee_key_algo": "hpke",
"trust_tier": "app-e2ee",
"e2ee_capability": "hpke",
"route": {
"route_binding": "not-verified",
"router": {
"organization": "tinfoil",
"confidence": "corroborated",
"evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
},
"workload_operator": {
"organization": "tinfoil",
"confidence": "declared",
"evidence": "PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."
}
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "not-proven",
"detail": "No verifier-owned challenge binding was exposed."
},
"channel": {
"state": "verified",
"detail": "The application channel key is bound to attested evidence."
},
"workload": {
"state": "not-proven",
"detail": "No expected workload measurement was verified."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "not-proven",
"detail": "No request-bound storefront-to-backend route receipt was verified."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
"target_hash": "39682b2a4cc37fadd6c5a6153fe99f722d1d0597073a7b6b0249678b2d09b32e",
"parsed_evidence_digest": "bacc415b2d8d147be6d558851489240c3ecf6428539a574cbc2e1181db6c3b69",
"artifact_set_digest": "55f5328a901429351efa06ef3b10bafc496de5fb37286940cee3ed83002c9373"
},
"evidence_artifacts": [
{
"kind": "provider-attestation-response",
"media_type": "application/json",
"collected_at": "2026-10-10T19:00:29.866102757+00:00",
"source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
"sha256": "fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e",
"size_bytes": 26025,
"encoding": "binary",
"metadata": {
"date": "Sat, 10 Oct 2026 19:00:30 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "sev-snp-report",
"media_type": "application/vnd.amd.sev-snp.report",
"collected_at": "2026-10-10T19:00:29.869201792+00:00",
"sha256": "1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491",
"size_bytes": 1184,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh"
}
},
{
"kind": "amd-vcek-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-10-10T19:00:29.871838610+00:00",
"sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
"size_bytes": 1347,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh",
"product": "Genoa",
"source": "provider-bundle"
}
},
{
"kind": "source-provenance-response",
"media_type": "application/json; charset=utf-8",
"collected_at": "2026-10-10T19:00:30.168429408+00:00",
"source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
"sha256": "046dd6fb8d1276f85069ecaf88aa9e0a71d626b7b3964204636d8041ab1adec3",
"size_bytes": 6007,
"encoding": "binary",
"metadata": {
"date": "Sat, 10 Oct 2026 19:00:30 GMT",
"etag": "W/\"6718b6e05323d9ff43315e7e45fc0f1dd4b6a52f0946c23b481439275075eeea\"",
"http_method": "GET",
"http_status": "200",
"last_modified": "Fri, 25 Sep 2026 00:07:42 GMT"
}
},
{
"kind": "verification-error",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-10-10T19:00:32.185850770+00:00",
"source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
"sha256": "bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6",
"size_bytes": 248,
"encoding": "utf-8",
"metadata": {
"check_id": "ppq-deepseek-v4-1-flash",
"provider": "ppq",
"status": "partial"
}
}
]
}