Stored Run Record

Run #2922

Completed Oct 11, 2026, 23:00:38 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36095b25603aef51778f423e17980f0df1a9c84f040980807a3fd86d42617dce345Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d85bef0e72c47e32c699a735c80e62637bdacf2bdcb9461658bdda6c755fcdb4Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-11T23:00:27.724877279+00:00",
  "latency_ms": 1149,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "90ab4ae26b4bab9071c3b869ee46d983f519954fa9a0fe67b725390a4f553feb0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "c3d27f61c2d7fad40f045de5805a01c0a0a958a22af75cc506eb648dc830058d",
    "artifact_set_digest": "8095e99738cf0e041a70416ceb7417ff1336a490c93911263291186a27b03997"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:27.970749684+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759627729",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:28 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:28.664578811+00:00",
      "sha256": "d85bef0e72c47e32c699a735c80e62637bdacf2bdcb9461658bdda6c755fcdb4",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:28.665347633+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:28.817394192+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "95b25603aef51778f423e17980f0df1a9c84f040980807a3fd86d42617dce345",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:28.873817903+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json360e196931f260e88fcfa842ee98c961c4d1317f51556fd37aff8f9a65fe7cc1539Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184bf0be20b13f7c050a9cdbcd4a0579ddf7192cb19671fc1cb034e7d83e71b094aOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-11T23:00:28.874234685+00:00",
  "latency_ms": 966,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "d057ee3e69e96dac5ae48da80e491cf14d323312f0fb65d435f823825971ff770000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "fa272400a9c274332b1e53f063d5dc631cd7fa90978a53d3e6111f17d8216d1d",
    "artifact_set_digest": "8a53893ea9d2eeb0ba183245a32609ed9255ee4a76ddc60e1daf5d27273c1d7b"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:29.001123034+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759628877",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:29 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:29.643053732+00:00",
      "sha256": "bf0be20b13f7c050a9cdbcd4a0579ddf7192cb19671fc1cb034e7d83e71b094a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:29.643771569+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:29.788760754+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "e196931f260e88fcfa842ee98c961c4d1317f51556fd37aff8f9a65fe7cc1539",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:29.840529700+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json360902d65409259d6c2262d443c4cba9c0c36b1e42f7460b22ac2a57b1355872d31Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18465cf1e0882ca03690f4a2c7ae34761554cc8c3864f56dac9f5257746c6318fb3Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-11T23:00:29.840885037+00:00",
  "latency_ms": 995,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "03bcfe3606207832f68f7005ebdbe013bf5d797c87609851fced5265e7be44e00000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "e5d65dc50fa97a080e93bd599e2cd91d3594bff9da243f44bff4de974d92ef9e",
    "artifact_set_digest": "bfec005b3dff12370060b2df3929ed9cf1957712eec766b3e11706de182024f3"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:29.962799242+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759629843",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:30 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:30.633194073+00:00",
      "sha256": "65cf1e0882ca03690f4a2c7ae34761554cc8c3864f56dac9f5257746c6318fb3",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:30.633911910+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:30.783086420+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "902d65409259d6c2262d443c4cba9c0c36b1e42f7460b22ac2a57b1355872d31",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:30.836258749+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json3604f9e757cc85ac6d1e0ce5486174c3ad3a11ec3813574a18cda33ab27cff5e10eOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184da0538e8c2f3078413c559492fd340b80da558e5506f6e3fbd9d790c6d20001dOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-11T23:00:30.836596923+00:00",
  "latency_ms": 974,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "e732340d4f89ed39f2c482fc1b43bbec8e62aff8fc0bf101ced4b85c9c015a440000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "2798eac32f65d8b66bba3f53d91ee1ba3ed5a299a93eeabcfd214051380737af",
    "artifact_set_digest": "fe650c705e61733a263f8766f40c153b83cae2fbc384c1a3a22c2b44bed9dc44"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:30.966090311+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759630839",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:31 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:31.605237054+00:00",
      "sha256": "da0538e8c2f3078413c559492fd340b80da558e5506f6e3fbd9d790c6d20001d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:31.606126734+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:31.756764800+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "4f9e757cc85ac6d1e0ce5486174c3ad3a11ec3813574a18cda33ab27cff5e10e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:31.810242201+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json36017352e59d7c3b571649170f73e559d926ee3194b474183be014ac49bdf06a997Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184e8e092cdcb0929253608dab6f30b7059f50fa78b245503bf79b00ea95a8bee03Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-11T23:00:31.810721050+00:00",
  "latency_ms": 1038,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "d83de9469ca7e3e49a527136c512f24a104b2e0220399edc2dcd49d10fe9e1d60000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "b4583f1f2dc399c900692d27cf5c6d785a8296acfeaf928dd697a251f8772644",
    "artifact_set_digest": "1e3a3a8c1d8550642bf2c564ecd41eaf8d4c0d1973c4803d983e318408d35f30"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:31.945929301+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759631813",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:31 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:32.638321371+00:00",
      "sha256": "e8e092cdcb0929253608dab6f30b7059f50fa78b245503bf79b00ea95a8bee03",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:32.639048516+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:32.790538711+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "17352e59d7c3b571649170f73e559d926ee3194b474183be014ac49bdf06a997",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:32.849192416+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json360313b4dcc7bed9a11aa9b42efac6a9debe8c3ce53af5cde11b6151babdfc62caeOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1845c432aa4d6301d231488c9d22e72deb113b08fc1b5f6f41b492507212fec811fOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-11T23:00:32.849594961+00:00",
  "latency_ms": 908,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "dfc3df0dab11b453d542514278273d07af6ab824ccad66584afa5018600b8c200000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "da6ae6bc09569a4032c29d6ef1eba7a84995cca0f1d4bcf4496ff3e2ba5da61b",
    "artifact_set_digest": "7f1d5c5c83e5327642428d7eb74b5231283385b8adfe512875006181a3ff38d7"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:32.965053622+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759632852",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:32 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:33.559513450+00:00",
      "sha256": "5c432aa4d6301d231488c9d22e72deb113b08fc1b5f6f41b492507212fec811f",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:33.560275379+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:33.706344281+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "313b4dcc7bed9a11aa9b42efac6a9debe8c3ce53af5cde11b6151babdfc62cae",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:33.757401110+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json3603d2e1a67b8f9f055f6c0a921ed228cd981c25564f7791dedf8f5fba674be764dOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1849ee7e5d1d6e9c028040fe1096ad955f29329051d214484195103d5de646fd8fbOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-11T23:00:33.757821119+00:00",
  "latency_ms": 1004,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "5a1b6240934dca36951d61720942b4053305913cc29f89bccb0be4e2d3d48a330000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "821943683c4ea01e0b2af57c4ab5ec4390835d68b76307103feb3e2d1bd95f74",
    "artifact_set_digest": "7038b2dce1a27970ae5cefac15aaeeca0dd3151c1d22735046686443c6e5ec1f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:33.874386577+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759633760",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:34 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:34.553878158+00:00",
      "sha256": "9ee7e5d1d6e9c028040fe1096ad955f29329051d214484195103d5de646fd8fb",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:34.554607106+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:34.704936803+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "3d2e1a67b8f9f055f6c0a921ed228cd981c25564f7791dedf8f5fba674be764d",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:34.762179891+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json360992b035cc24c87aa9aa513152c43531e2daab649f3e0f40c59f7bd97a3f9deb2Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841d27074a9c8c102152a110feb0b76c1263dc7517a5d31277b05cc8be32d321dfOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-11T23:00:34.762514629+00:00",
  "latency_ms": 892,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "4f0a522b9fa9665b0302de756b0324399db1115718b7b580a83294e7b228b6230000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "cce65261d9981a18a49609365bb703955d69316faf2dbca8f45eeae634557b8c",
    "artifact_set_digest": "ba88d0f6dbbb8c31484ab58b19b548b85d9d41430e55d26e69b23ee6b608b885"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:34.880384846+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759634765",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:34 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:35.463991928+00:00",
      "sha256": "1d27074a9c8c102152a110feb0b76c1263dc7517a5d31277b05cc8be32d321df",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:35.464711338+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:35.608003399+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "992b035cc24c87aa9aa513152c43531e2daab649f3e0f40c59f7bd97a3f9deb2",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:35.655148678+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json3602f5be2c32179fed361bee5c6186ba9257452c9f913b80de92bf036081e8c16d5Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1843725df2076d59994a792d6b0b41873c5c8ddd6c65fcee2c8d5ea311b321dbfe7Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-11T23:00:35.655495188+00:00",
  "latency_ms": 1008,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "780f2da79ba4bca53c416928b88412176cdc9c03539c6b457cda5ffa8521f2db0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "a63e6008ec4aea5bcc1ee87667f8a1632b31950da39dbbf5e6e8470344606f1d",
    "artifact_set_digest": "d780dc86906dfe1d08132883e911c46c3a4d21106fa998eff72e24b5ab026f6a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:35.767554490+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759635658",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:35 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:36.455328164+00:00",
      "sha256": "3725df2076d59994a792d6b0b41873c5c8ddd6c65fcee2c8d5ea311b321dbfe7",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:36.456112335+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:36.607973025+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "2f5be2c32179fed361bee5c6186ba9257452c9f913b80de92bf036081e8c16d5",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:36.663948735+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360ba67c62f76f5d281a24da982883d70d8fa42af3a94f0b44a40d4266ea6259bfcOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d423791da3e9d9bb2a8ef46715cb7a1e0d0b3f63dc7895ec239d73d5299da942Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-11T23:00:36.664411002+00:00",
  "latency_ms": 981,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "7e1914ba434417a86d19eb3a00c437f36153810792db3e600ecb7d32732f122b0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "fa71a293c0803efd1d179a8c5b95054491e2617ead41b35e20d6b8b03e56bc3b",
    "artifact_set_digest": "5305e441f3d5d3be823461b2ab87cb9e0633cfa3b3ef9da632b68ffa6ac67e6c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:36.781878874+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759636667",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:37 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:37.433050462+00:00",
      "sha256": "d423791da3e9d9bb2a8ef46715cb7a1e0d0b3f63dc7895ec239d73d5299da942",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:37.433785421+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:37.588420868+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ba67c62f76f5d281a24da982883d70d8fa42af3a94f0b44a40d4266ea6259bfc",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:37.645210105+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360ff1c4921c0036cefa1e5c08df0578f9943d0842b841769f9df7bcb34f4c77c66Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1849f1cb530b3b1ee801b3e8f169a308212daf008a79ac8c7becd6b74547b5e9fe6Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-11T23:00:37.645603182+00:00",
  "latency_ms": 920,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "c97463b7227d36e6ddfb9a1975bbd69d650eca186b6412a477eb8ce1f34c70e50000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "2572e7c4c5e9600c3c27b9fde04db81b5c5e2cc2b5b18775b1a2bc5af852734f",
    "artifact_set_digest": "a0905c3026e7e56f9bbad3df40b676894ab57c71ed0fcdd66484353ac5a54394"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-11T23:00:37.759640456+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791759637648",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 11 Oct 2026 23:00:37 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-11T23:00:38.369086576+00:00",
      "sha256": "9f1cb530b3b1ee801b3e8f169a308212daf008a79ac8c7becd6b74547b5e9fe6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-11T23:00:38.369808220+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-11T23:00:38.516865406+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ff1c4921c0036cefa1e5c08df0578f9943d0842b841769f9df7bcb34f4c77c66",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-11T23:00:38.566092632+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}