Stored Run Record

Run #2962

Completed Oct 13, 2026, 15:00:44 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3603b7247e569a6616da76651eb313af4b4d2acd0f6332f124b68362a12e0ba76dcOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1844f35793a2f80c7d86324d99c1f7db095e6bef07df6d1c11dfc3e40aa7d6abde7Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-13T15:00:33.578618672+00:00",
  "latency_ms": 1122,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "2f5aa2a1066805cbe163be5f303557138b9d7a602f48fd531f7fb743176d265f0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "40012e77d9c061026e6dca85f2a674f3e2fdf82a7d179e38ec8af9d162cea6a1",
    "artifact_set_digest": "771a90b713cfaa26e8a4b0ca41ab58489e9e9548fd3a4f91df043dcbb6835091"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:33.871129830+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903633584",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:33 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:34.493125697+00:00",
      "sha256": "4f35793a2f80c7d86324d99c1f7db095e6bef07df6d1c11dfc3e40aa7d6abde7",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:34.494008805+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:34.646161730+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "3b7247e569a6616da76651eb313af4b4d2acd0f6332f124b68362a12e0ba76dc",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:34.700186929+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360e8a5ba0c76159418daf181723dbe34ce491a451dccb32b3c15a2950c094005f8Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d71220e6608c1a532e25abc7aa16d89f45d5c3fa2244801ae2f3a533a90ff42eOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-13T15:00:34.700644147+00:00",
  "latency_ms": 1036,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "86a49653472ac1c74bfac818f56fb4fdd879f82b7bbe912cbc4633e26577cece0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "80640a1b5688ef40cf8664f11495114c6162d2af753bf6c34138b820145295a2",
    "artifact_set_digest": "e55b9f81bb2ab4a1db355f76701d44353563b95b6683324b858a3dbd2135a5be"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:34.823814657+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903634703",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:35 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:35.517121339+00:00",
      "sha256": "d71220e6608c1a532e25abc7aa16d89f45d5c3fa2244801ae2f3a533a90ff42e",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:35.517860937+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:35.679466581+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "e8a5ba0c76159418daf181723dbe34ce491a451dccb32b3c15a2950c094005f8",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:35.736942605+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360f4926e3f88830200e3fc706865d2a7b4460a5f782ad224ac0923f7d16c87642aOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1843cabacb9c661acf8907ccf7f973a79627d716ccd250b3ee054c8ec294180cdc0Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-13T15:00:35.737321896+00:00",
  "latency_ms": 909,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "17c6277024e63c0237bc551c2ead320a2b42a5d608003326fa2def70aa78f4c00000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "e12d68764a4d9032657be1db971cf9af842c42cc952c12ef5daca4c43946576f",
    "artifact_set_digest": "09c4c92f58f0f7e94df3e49f4fea8c2d1c7fb40e6b5419fd8d95d030c83642cf"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:35.859092469+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903635740",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:36.450120275+00:00",
      "sha256": "3cabacb9c661acf8907ccf7f973a79627d716ccd250b3ee054c8ec294180cdc0",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:36.450857569+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:36.596440736+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "f4926e3f88830200e3fc706865d2a7b4460a5f782ad224ac0923f7d16c87642a",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:36.646755382+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360221813eeae60c1106946da2be7c10ad8faaf28cfb774f5b040cdd7a62d8c8f53Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18472dd991ece39736e0bae9fdeaf9776f7981cf75f9330ba41422bd09b873cc7f9Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-13T15:00:36.647212540+00:00",
  "latency_ms": 988,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "aa25e678f566f7d0233a13c96144a805c3f91dca3a11861f1c833121ed2edbb10000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "dacdb1482619ea3f820568493b052cc61056fa58772b53ccb5005a6905468e39",
    "artifact_set_digest": "de7790da8a0600400113e12dbe3399528c250bf74fde7b2bf97ed6354eedbf21"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:36.762469470+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903636650",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:37.437189815+00:00",
      "sha256": "72dd991ece39736e0bae9fdeaf9776f7981cf75f9330ba41422bd09b873cc7f9",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:37.437926427+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:37.583497702+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "221813eeae60c1106946da2be7c10ad8faaf28cfb774f5b040cdd7a62d8c8f53",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:37.635461142+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360028bbe542f16339bdb4f272a3c0042994db77f4bb2211cdf1ae2fea4d2722979Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d3b761b6f9a219cdd4bbf8903f83049f0428a7682d33c59289b7e2508a3aead6Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-13T15:00:37.635871372+00:00",
  "latency_ms": 874,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "1ed88c70200d8803f5adf5e660a5cbb7874f59dd079dc4bb79324e864564ecd50000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "964a1cd78de21a4c83e78638d24d2273e34238e4a01f0089c373acd7ff47084d",
    "artifact_set_digest": "09a1ab234d6e5873055aa1e7b51d792844cf8b1ad64e5f9be1588b65df387757"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:37.703355185+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903637638",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:38 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:38.309566403+00:00",
      "sha256": "d3b761b6f9a219cdd4bbf8903f83049f0428a7682d33c59289b7e2508a3aead6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:38.310312252+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:38.462133676+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "028bbe542f16339bdb4f272a3c0042994db77f4bb2211cdf1ae2fea4d2722979",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:38.509820811+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360a413812a9d4badd009608d301ad715e572cab810857908da2ad647336502f7e5Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184094e00195b37c6f0e8fc1bca595725ebb998384342ebbca93ffafaf3fb9069f3Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-13T15:00:38.510218537+00:00",
  "latency_ms": 907,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "c7ec7daf2b39aa1777f52ea1f6cdfadb0d859cf2c217cbd46b5fa54851b9eeb60000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "e6e732632ec4506831b7f176ab7de71902d61406d00a99e72b279b449eed538e",
    "artifact_set_digest": "aee794d45562470e4c3f089c167f54fc431872a491f54848ea66988fbf04af5f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:38.624289913+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903638512",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:38 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:39.216510567+00:00",
      "sha256": "094e00195b37c6f0e8fc1bca595725ebb998384342ebbca93ffafaf3fb9069f3",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:39.217399165+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:39.363337769+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "a413812a9d4badd009608d301ad715e572cab810857908da2ad647336502f7e5",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:39.417190073+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360fa021f6ed7cc9f7c75153dd889f446e5187e7bdbe0a2d0000a724025f2f49982Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184b34d899e065a68b1139ea089cfd1f6ed0cbaeaffba5eb2b50a66b241095b032bOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-13T15:00:39.417652631+00:00",
  "latency_ms": 909,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "3757fbdfae53e1ab1db0edd2f99959466f4261de4df926772150f2eda5c1dab40000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "8992aa5f58c6494f4e047b8683aac61619eedaf8d7c9854faf9bbb62f1e69779",
    "artifact_set_digest": "5127308b5827a934ca8d482ae2a043bde1609c1589d99da932a80ccb0b7faf71"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:39.543646759+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903639421",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:40 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:40.135769149+00:00",
      "sha256": "b34d899e065a68b1139ea089cfd1f6ed0cbaeaffba5eb2b50a66b241095b032b",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:40.136551277+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:40.280106829+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "fa021f6ed7cc9f7c75153dd889f446e5187e7bdbe0a2d0000a724025f2f49982",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:40.326645720+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360f17362b67162f84e31e80162daacefb2eeada8496b9260ec409c67d0cf1a74fcOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184bdb41e9808654dfa946f24e04d2ad1a0aa84a65901f63d5ae603eb66b4c49c05Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-13T15:00:40.327118267+00:00",
  "latency_ms": 936,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "94192f23b3c2064bc4864e2de706cb2139a54e0ca8b70e94df77110b0bba4b400000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "b11d3747487179f8d4099c840d62d1b053d336118f2715b2d935e8c27fc8ff5e",
    "artifact_set_digest": "91e88f69b92fdb148ab3b55a62ce345ad2d39e5fb4a434a01cd88637b0cd8adf"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:40.447288276+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903640329",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:41 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:41.063200718+00:00",
      "sha256": "bdb41e9808654dfa946f24e04d2ad1a0aa84a65901f63d5ae603eb66b4c49c05",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:41.063959662+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:41.212094137+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "f17362b67162f84e31e80162daacefb2eeada8496b9260ec409c67d0cf1a74fc",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:41.262903010+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json36039d4f9cb08cd603bb6a0bef7f46da27db45f9e1a400e38f9a983757c5a60de8eOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1843616ebb1984ea1e36590a926e4ba571a4826762f81628284f53466d20cc9f248Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-13T15:00:41.263348436+00:00",
  "latency_ms": 1064,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "2c041d9641741b60815482f27b88ade3edf7fc55f94d2b02c0686de366b7a8290000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "0a299e336963fab5c143aac20361afec2842acd0c1980cf7927f0817fec22d34",
    "artifact_set_digest": "c88793754b668009a6036dd99068aab9bd0fe7bb72694446363f00aa28a9d34c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:41.394000285+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903641266",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:41 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:42.111490798+00:00",
      "sha256": "3616ebb1984ea1e36590a926e4ba571a4826762f81628284f53466d20cc9f248",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:42.112253490+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:42.267014439+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "39d4f9cb08cd603bb6a0bef7f46da27db45f9e1a400e38f9a983757c5a60de8e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:42.326953345+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360ec3567de1d1b930550762ebb52144e1aeeb7d85f1f8c7283946c6e1a0fc4280eOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1845bcd62de6dcfb7d5f03ce54d0bc9541bfac12ff7ae155a776ea55f71bb244ca8Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-13T15:00:42.327445178+00:00",
  "latency_ms": 947,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "c7be79a76d8fe45d4d2d9c1d9d8462165c306d99aa39305bedd658f64ba4d9b80000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "1d2d4531740604d3b5f7cf6d8f4e7b1a829058304a94ddf4fa077c8f740fae55",
    "artifact_set_digest": "a73a9f3823f2355a6a7bc3e3bfdb4ae4172e9b92e600529b873a0f77d7f2adc3"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:42.454447808+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903642330",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:43 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:43.074377008+00:00",
      "sha256": "5bcd62de6dcfb7d5f03ce54d0bc9541bfac12ff7ae155a776ea55f71bb244ca8",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:43.075141262+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:43.221474096+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ec3567de1d1b930550762ebb52144e1aeeb7d85f1f8c7283946c6e1a0fc4280e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:43.274147137+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json36083364433c1b440fc2bb431a214ea20994056a753b02004481aaf3200971e4df6Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18475581c695b482ae51429a0f1ed4254559117f73e089c39b6861be882cb9b8d07Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-13T15:00:43.274495601+00:00",
  "latency_ms": 953,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "e0e821e6e609db5e911a61c2ff0d1b1c663f7e0598405d19f65606a374a4a24b0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "fddc3c67e8a668aaa5069380acb3344f4e8f3335a310241c681b4f92492ab5ea",
    "artifact_set_digest": "9d951fa85f05ca2481f35abd7dae68881553c6fddef02bd712fc0129be822913"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-13T15:00:43.395245309+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791903643277",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 13 Oct 2026 15:00:43 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-13T15:00:44.012679616+00:00",
      "sha256": "75581c695b482ae51429a0f1ed4254559117f73e089c39b6861be882cb9b8d07",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-13T15:00:44.013472985+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-13T15:00:44.171328872+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "83364433c1b440fc2bb431a214ea20994056a753b02004481aaf3200971e4df6",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-13T15:00:44.227508263+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}