Stored Run Record

Run #2936

Completed Oct 12, 2026, 13:02:16 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
9
Verified
1
Incomplete
0
Failed
0
Unavailable
8

Recorded Decisions

Checks in this run

Run JSON

Tinfoil

deepseek-v4-1-flash

DeepSeek V4.1 Flash (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json109253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abcOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-877e0818795414549ded0fe0700fb030ce01437b585f80bf890f1e524a356276b34Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-deepseek-v4-1-flash",
  "label": "DeepSeek V4.1 Flash (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "deepseek-v4-1-flash",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-deepseek-v4-1-flash",
  "label": "DeepSeek V4.1 Flash (router-verified)",
  "model": "deepseek-v4-1-flash",
  "status": "unreachable",
  "ts": "2026-10-12T13:00:30.391895693+00:00",
  "latency_ms": 14852,
  "error": "Inference route probe for deepseek-v4-1-flash could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "deepseek-v4-1-flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d34ec61b0a4764b4c8df87fc1cf33ece8590fa934f9a65181dd6af5035b46f29",
    "parsed_evidence_digest": "51f8b729e98eefc8b7424c264755a123c4570bf26aa0cf0525ab6df729a00ef4",
    "artifact_set_digest": "5a17d7a5c4a39808c38c8d3f7c3a5d5242900fd66276a8f111aeb4508853a176"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:30.874877593+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:30 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:00:31.034701394+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:31.035694648+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:31.760055362+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:00:33.468343026+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:32 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:33.920961271+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc",
      "size_bytes": 109,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:25 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:37.081938468+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:36 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:45.244038291+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:44 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:00:45.244093184+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "deepseek-v4-1-flash"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:00:45.244338785+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "e0818795414549ded0fe0700fb030ce01437b585f80bf890f1e524a356276b34",
      "size_bytes": 77,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-deepseek-v4-1-flash",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

gemma4-31b

Gemma4 31B (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-868291949fff7d08ea6e3087bbcf053830520cd627b730ffdbc6d6c652246fe0b72Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gemma4-31b",
  "label": "Gemma4 31B (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "gemma4-31b",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gemma4-31b",
  "label": "Gemma4 31B (router-verified)",
  "model": "gemma4-31b",
  "status": "unreachable",
  "ts": "2026-10-12T13:00:45.244772468+00:00",
  "latency_ms": 14568,
  "error": "Inference route probe for gemma4-31b could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "gemma4-31b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "56631b16aef630744c7aa9b8f70194171d5e32e7e3fe0434d089135e3cfbce4f",
    "parsed_evidence_digest": "9b081846290194541b77987fc4d2230aaec7be7da3a9b20b0e677a266fdf0c6d",
    "artifact_set_digest": "46f07b13aa7c958273264e3748498ebb3f7d979d32c50aa943e81ec111afb66f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:45.728072215+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:44 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:00:45.888112642+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:45.889184763+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:46.586532459+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:00:48.247456446+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:47 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:48.489631754+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:47 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:51.651204298+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:50 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:59.812483461+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:58 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:00:59.812531682+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "gemma4-31b"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:00:59.812735404+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "291949fff7d08ea6e3087bbcf053830520cd627b730ffdbc6d6c652246fe0b72",
      "size_bytes": 68,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gemma4-31b",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

glm-5-3

GLM 5.3 (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json145bba44408139bcf2a6b99d190e2207098f83f63c9db410953d9fb1fa9c0bc42f2Open
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-8651f9b1e711f981f27d894b59d6710073cf30681da173aa445f0df2ec44b516620Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-glm-5-3",
  "label": "GLM 5.3 (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "glm-5-3",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-glm-5-3",
  "label": "GLM 5.3 (router-verified)",
  "model": "glm-5-3",
  "status": "unreachable",
  "ts": "2026-10-12T13:00:59.813158658+00:00",
  "latency_ms": 14544,
  "error": "Inference route probe for glm-5-3 could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "glm-5-3"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "8d609ced67909721943781ddf9b7e425dae6be9c6c8bb57211d4fce61aecb3e1",
    "parsed_evidence_digest": "a251044da6aaf5cff28e22d9d3d9ea331ba443fa0514cd1a7f3e7cdd1623de51",
    "artifact_set_digest": "ec3fe30982bad24877ec9e86ba4b6696fcc286cc74b718fd921fad897dbf571a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:00.294916191+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:59 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:01:00.454815273+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:00.456083022+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:01.134745352+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:01:02.796212798+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:01 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:03.034498400+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "bba44408139bcf2a6b99d190e2207098f83f63c9db410953d9fb1fa9c0bc42f2",
      "size_bytes": 145,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:02 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:06.195280781+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:05 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:14.356393402+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:13 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:14.356445179+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "glm-5-3"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:14.356695959+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "1f9b1e711f981f27d894b59d6710073cf30681da173aa445f0df2ec44b516620",
      "size_bytes": 65,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-glm-5-3",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

gpt-oss-120b

GPT OSS 120B (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-87026ee98d2965dba6628c5af7cd5485063d0529fc8bd661e29834666881a14280fOpen
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-120b",
  "label": "GPT OSS 120B (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "gpt-oss-120b",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-120b",
  "label": "GPT OSS 120B (router-verified)",
  "model": "gpt-oss-120b",
  "status": "unreachable",
  "ts": "2026-10-12T13:01:14.357189115+00:00",
  "latency_ms": 14635,
  "error": "Inference route probe for gpt-oss-120b could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "86c351b364f97b9371479dbf1a552e45414803b064ef51639ceb29551009dc11",
    "parsed_evidence_digest": "a8e991f6f14039eb510d8d6040e84c0637ffcfa6c7dd0722062de8d8e909a21c",
    "artifact_set_digest": "63433b3c71ee2502fc168a4ce3134b35e607327826a85f87c6c699504968a2e0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:14.840578659+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:13 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:01:15.000963263+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:15.002075770+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:15.750128051+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:01:17.429676057+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:16 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:17.670428296+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:16 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:20.830871592+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:19 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:28.992460696+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:28 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:28.992509448+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "gpt-oss-120b"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:28.992735542+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "26ee98d2965dba6628c5af7cd5485063d0529fc8bd661e29834666881a14280f",
      "size_bytes": 70,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gpt-oss-120b",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

gpt-oss-safeguard-120b

GPT OSS Safeguard 120B (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json109253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abcOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-88023c8690ba534e5ce51379dbd98a6e40ecdaaf80947abc56e7e0e3fbd0a726662Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-safeguard-120b",
  "label": "GPT OSS Safeguard 120B (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "gpt-oss-safeguard-120b",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-safeguard-120b",
  "label": "GPT OSS Safeguard 120B (router-verified)",
  "model": "gpt-oss-safeguard-120b",
  "status": "unreachable",
  "ts": "2026-10-12T13:01:28.993132206+00:00",
  "latency_ms": 14983,
  "error": "Inference route probe for gpt-oss-safeguard-120b could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "gpt-oss-safeguard-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "4f05c6a64827779013aea874b9f7837bce19ee53a2da487037571b58a2787865",
    "parsed_evidence_digest": "4fc200e9c10b0208eaadab97756d31612f4f9749189afe3eba53581d4f8a8be7",
    "artifact_set_digest": "7dfa977aecc5e44187730e633ae7cdfee890019d6c6a83dacce715d4a374bba7"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:29.474391634+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:28 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:01:29.634004089+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:29.634939825+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:30.300766865+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:01:32.300299437+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:31 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:32.652839055+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc",
      "size_bytes": 109,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:50 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:35.814195737+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:34 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:43.975670759+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:43 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:43.975735440+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "gpt-oss-safeguard-120b"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:43.975957467+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "23c8690ba534e5ce51379dbd98a6e40ecdaaf80947abc56e7e0e3fbd0a726662",
      "size_bytes": 80,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gpt-oss-safeguard-120b",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

kimi-k3

Kimi K3 (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json109253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abcOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-8659f0401b47573bdd73d0a65b9994647ad42983d722934585c65bf721669b9f16aOpen
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-kimi-k3",
  "label": "Kimi K3 (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "kimi-k3",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-kimi-k3",
  "label": "Kimi K3 (router-verified)",
  "model": "kimi-k3",
  "status": "unreachable",
  "ts": "2026-10-12T13:01:43.976360403+00:00",
  "latency_ms": 14594,
  "error": "Inference route probe for kimi-k3 could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "kimi-k3"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "daf6c90974c33e9b08d16e3ba15d4fdb74dd229d8db83120c14bcafc849c7dae",
    "parsed_evidence_digest": "398b9246ad9522d82921c9809d82d60d44f3947b4d43221668f57bd72a4d575c",
    "artifact_set_digest": "c9c8c018d7b7b16b7df0408d94dd44446dc6d8c4c3c4e0eb6a41aa9ea45ec3f7"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:44.459741588+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:43 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:01:44.619789675+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:44.621090175+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:45.291838215+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:01:46.988001645+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:46 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:47.246362436+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc",
      "size_bytes": 109,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:39 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:50.408516134+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:49 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:58.569873094+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:57 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:58.569925502+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "kimi-k3"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:01:58.570187324+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "9f0401b47573bdd73d0a65b9994647ad42983d722934585c65bf721669b9f16a",
      "size_bytes": 65,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-kimi-k3",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

llama3-3-70b

Llama3.3 70B (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json109253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abcOpen
provider-inference-probe-responseapplication/json137fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908dfOpen
provider-inference-route-headerstext/plain; charset=utf-876179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-8702ad18ec141c0907f1d765d730e9708d63af7683d44c2d6f446861be7d3fa82c5Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-llama3-3-70b",
  "label": "Llama3.3 70B (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "llama3-3-70b",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-llama3-3-70b",
  "label": "Llama3.3 70B (router-verified)",
  "model": "llama3-3-70b",
  "status": "unreachable",
  "ts": "2026-10-12T13:01:58.570628531+00:00",
  "latency_ms": 14636,
  "error": "Inference route probe for llama3-3-70b could not be observed: HTTP 429",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "upstream_model": "llama3-3-70b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "af4c3087e4d23c4a97be1ac3204e00f4b2f9756e478efa350e1bb892fd83a29f",
    "parsed_evidence_digest": "2bc911d3ba5ead0ecfe68ba10a7894cd95b8c4a4fe45e6a9eb99a4ef18a28d2d",
    "artifact_set_digest": "8107575d3a303a0f572b77d4c95996c04a89bbd31eedf6939263890093bd0bd2"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:01:59.054955080+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:01:58 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:01:59.215652195+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:59.216860482+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:01:59.947021488+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:02:01.621531230+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:00 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:02:01.884024414+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc",
      "size_bytes": 109,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:19 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:02:05.044859999+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:04 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:02:13.206087436+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
      "size_bytes": 137,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:12 GMT",
        "http_method": "POST",
        "http_status": "429"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:02:13.206136909+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
      "size_bytes": 76,
      "encoding": "binary",
      "metadata": {
        "model": "llama3-3-70b"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:02:13.206374625+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "2ad18ec141c0907f1d765d730e9708d63af7683d44c2d6f446861be7d3fa82c5",
      "size_bytes": 70,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-llama3-3-70b",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

pii-filter

Pii Filter (router-verified)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
provider-ehbp-keys-responseapplication/ohttp-keys41ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fbOpen
provider-inference-probe-responseapplication/json9724bc1fa24c419d0d2d56a7c5935ad2d19c699cc5eb163c04af41240a23352774Open
provider-inference-route-headerstext/plain; charset=utf-81556afb9e61b04ece356880c51e128f2f1e770a242efec0e90fc065c1524c383dd1Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
verification-errortext/plain; charset=utf-8683b29a08815a43eb21dc0670002725a21d59357588fd1bbe1a09f1007e5fb9031Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-pii-filter",
  "label": "Pii Filter (router-verified)",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": "pii-filter",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-pii-filter",
  "label": "Pii Filter (router-verified)",
  "model": "pii-filter",
  "status": "unreachable",
  "ts": "2026-10-12T13:02:13.206824359+00:00",
  "latency_ms": 3305,
  "error": "Inference route probe for pii-filter could not be observed: HTTP 404",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "pii-filter.tinfoil.sh",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "e2ee_public_key": "b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
  "e2ee_key_algo": "hpke",
  "trust_tier": "none",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
    },
    "deployment_id": "pii-filter.tinfoil.sh",
    "upstream_model": "pii-filter"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ee923b8a87909c3a133c729c6898ecdb097c4c0d0e375407f9618bef1018c96e",
    "parsed_evidence_digest": "d5cdad25bb5462ac7675e114f114e49ad245f565191f26a3813623f6543437ab",
    "artifact_set_digest": "e730182e1972b962f8c5ea6b7f05191d18e55075e079bdaf7c219bdacdc8e850"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:02:13.693366605+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:12 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:02:13.853300077+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:02:13.854269917+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:02:14.620629602+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "provider-ehbp-keys-response",
      "media_type": "application/ohttp-keys",
      "collected_at": "2026-10-12T13:02:16.324636509+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
      "sha256": "ea436d45f7d738359478455a05eabefa4a3f9a95d498f74dcece29d7d9fdd5fb",
      "size_bytes": 41,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:15 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "provider-inference-probe-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:02:16.511801225+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "24bc1fa24c419d0d2d56a7c5935ad2d19c699cc5eb163c04af41240a23352774",
      "size_bytes": 97,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:02:15 GMT",
        "http_method": "POST",
        "http_status": "404"
      }
    },
    {
      "kind": "provider-inference-route-headers",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:02:16.511856819+00:00",
      "source_url": "https://inference.tinfoil.sh/v1/chat/completions",
      "sha256": "6afb9e61b04ece356880c51e128f2f1e770a242efec0e90fc065c1524c383dd1",
      "size_bytes": 155,
      "encoding": "binary",
      "metadata": {
        "model": "pii-filter"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-12T13:02:16.512161481+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "3b29a08815a43eb21dc0670002725a21d59357588fd1bbe1a09f1007e5fb9031",
      "size_bytes": 68,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-pii-filter",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

Router

Router

verified

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3478d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23Open
provider-attestation-responseapplication/json66999ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139aOpen
source-provenance-responseapplication/json; charset=utf-822,2409bbefff209a5423239207d4c07417a03b5e23dcac200d3cdfb2a69f754ce4cfcOpen
source-provenance-responseapplication/json; charset=utf-86,005df6a29950526fb923870a56434f10a2504aa1a9d34c7039072bf8eac058f0ba5Open
tls-leaf-certificateapplication/pkix-cert89535175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-router",
  "label": "Router",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": null,
  "metadata": {
    "channel": "gateway",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-router",
  "label": "Router",
  "status": "verified",
  "ts": "2026-10-12T13:00:25.987617823+00:00",
  "latency_ms": 4404,
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375",
    "measurement": "5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23"
  },
  "images_verified": true,
  "tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
  "tls_matches": false,
  "version": "v0.0.157",
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.157",
  "release_digest": "ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil router enclave endpoint (inference.tinfoil.sh)."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Backend enclave verification is delegated to the router chain."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-applicable",
      "detail": "This gateway target does not claim a quote-bound client channel."
    },
    "channel": {
      "state": "not-applicable",
      "detail": "Gateway TLS termination is expected for this target."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-applicable",
      "detail": "This target is the gateway workload, not a storefront-to-model route."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242",
    "parsed_evidence_digest": "329098e830befdc2eed1bb5f08a0c39095b1c378b5d3330e954d5b44294ad7db",
    "artifact_set_digest": "d49e4639828c37d394ee323517c3e129402272ac569dfd9f64f038783187c02b"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-12T13:00:26.472186639+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "99ab18e030e5ae949ba7657b120b8f29a5ee57041c6f0a36975c8c995201ac41",
      "size_bytes": 669,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:25 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-12T13:00:26.632243428+00:00",
      "sha256": "1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:27.234952154+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "8d07bc57cb8a57f96cd4c09a1d07932757320ea8b62aaa9768347a56a8679c23",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-12T13:00:28.037251326+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
      "size_bytes": 895,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-10-12T13:00:28.289514010+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
      "sha256": "df6a29950526fb923870a56434f10a2504aa1a9d34c7039072bf8eac058f0ba5",
      "size_bytes": 6005,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:28 GMT",
        "etag": "W/\"dce74d688c04905c97d6a7093c19d0be32c94a637a973ac5aab4e3ab6b3d26bd\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 12 Oct 2026 06:31:58 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-10-12T13:00:28.944512285+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227",
      "sha256": "9bbefff209a5423239207d4c07417a03b5e23dcac200d3cdfb2a69f754ce4cfc",
      "size_bytes": 22240,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 12 Oct 2026 13:00:28 GMT",
        "etag": "W/\"1239982da1e45e7e1cb42692173ca4bb3fff753c88a357bef13cbf449f278336\"",
        "http_method": "GET",
        "http_status": "200"
      }
    }
  ]
}