Stored Run Record

Run #2972

Completed Oct 14, 2026, 01:00:37 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360b2c54ce0b89dfc585982e5cb7c617dc2235d5e5f4809e00c6c456b0c4c79698cOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846426e4caec2ada595caca674c72a4ecb1617f5b3fb12e986170792a570dbb51aOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-14T01:00:27.216675896+00:00",
  "latency_ms": 1132,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "58ba161319fb543adf834a222227f57f9106b42ba44decb20106f84fbe2647b20000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "e1e24214748605ecc95a198114ce7dfc803c5a9c709e8a13b7e7786429fd5a79",
    "artifact_set_digest": "411c55ee07c98ce4b864aa6e8c56e1e2951605c4ef1be5381fd745801c4b7fbb"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:27.525224455+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939627223",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:28 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:28.146406128+00:00",
      "sha256": "6426e4caec2ada595caca674c72a4ecb1617f5b3fb12e986170792a570dbb51a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:28.147313902+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:28.299050810+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "b2c54ce0b89dfc585982e5cb7c617dc2235d5e5f4809e00c6c456b0c4c79698c",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:28.348951773+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json3603abce617a833655eaacc5ffbdfe8a79fbf1a6a7ed50e557e9defe57e3f787fe7Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18454efb5b1461a0dfe671e4d086b9195d0b2d2ca2acda629e1f25f8aaa55fcf8a3Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-14T01:00:28.349457262+00:00",
  "latency_ms": 861,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "9e187b34fe41e358a1e31d729434a22feb766afc58ee32f50598a29d55db16710000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "27303623d55e4679e63f429b6290f2651f78614370cbc0d1eca309a9aa4afdbf",
    "artifact_set_digest": "2b05107814338b442060995f6bed12d18cf5e4eda1d5a3263614ed6e22cb37be"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:28.429613753+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939628352",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:29 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:29.008794277+00:00",
      "sha256": "54efb5b1461a0dfe671e4d086b9195d0b2d2ca2acda629e1f25f8aaa55fcf8a3",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:29.009524748+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:29.159769856+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "3abce617a833655eaacc5ffbdfe8a79fbf1a6a7ed50e557e9defe57e3f787fe7",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:29.210355234+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360636e66b2c65fcb46e0a193ceb3aa88c5753ae5abbda8c3f8f685861fd495be43Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d43754fc9ac3d22c171108b4aa01428e5a59e2aa3010acd1a51dbc51fb39c005Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-14T01:00:29.210697407+00:00",
  "latency_ms": 899,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "32f524156c24355d9e5d33283e8b8147757e7336777ff1dc7040fd8ad94b44ee0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "a3ee32167d496df927dce2e76d0a39f3b01f7f92e70f0298cc4917e6b85f5a11",
    "artifact_set_digest": "92c3edc0f89aa08ebf5554ea8def4719814c0e5dfa0c3c60d258fb0e19be9d08"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:29.356114084+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939629213",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:30 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:29.920317122+00:00",
      "sha256": "d43754fc9ac3d22c171108b4aa01428e5a59e2aa3010acd1a51dbc51fb39c005",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:29.921119457+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:30.064470128+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "636e66b2c65fcb46e0a193ceb3aa88c5753ae5abbda8c3f8f685861fd495be43",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:30.110131586+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360794e12f3e087a5584fb5f691b8cd78ad73cf1117185a9470387c64dac402c42dOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846277a72b1d24a864e2ab1a17b65a2a0336b12289ebda0d2d7c86df3ffcf593c3Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-14T01:00:30.110474188+00:00",
  "latency_ms": 985,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "0b83abc9ba5de0511c22fad066e34c0627bfcbdba5721b693c319611f64db2540000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "38753b2272fd81d27754151a2c3225c9b0f377b1e571842217b09b1b9759baa0",
    "artifact_set_digest": "7799d8b532f550120173dc8c4b254ff59c7ad31dbcfd58a704705f41adde91c2"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:30.235085363+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939630113",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:30 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:30.890188032+00:00",
      "sha256": "6277a72b1d24a864e2ab1a17b65a2a0336b12289ebda0d2d7c86df3ffcf593c3",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:30.890902042+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:31.043730378+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "794e12f3e087a5584fb5f691b8cd78ad73cf1117185a9470387c64dac402c42d",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:31.095505558+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360e87f5b8219ae3b19ad0c3f2ebff01d9e52eaf8d960f08cd9c97a1197365a9d97Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1844d32c609248a36e9227cd184904f9a62eaef42942f224c23c4f3bc1c05d45768Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-14T01:00:31.095886203+00:00",
  "latency_ms": 979,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "e0f3181f7d94239b534179f1e60fa98e0abe803e13ffcacbb948b7b68eaa171e0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "def6469efef472c0914e77aa4ea067620e52bda858052ce8bb2a164bf8fe6ded",
    "artifact_set_digest": "2263ffa3c144deb04e9a6bdb5aa374240436b7b728c31051ec2cc32b5af54469"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:31.221323026+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939631099",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:31 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:31.872037250+00:00",
      "sha256": "4d32c609248a36e9227cd184904f9a62eaef42942f224c23c4f3bc1c05d45768",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:31.872762260+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:32.022585177+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "e87f5b8219ae3b19ad0c3f2ebff01d9e52eaf8d960f08cd9c97a1197365a9d97",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:32.075188461+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json3608b1475e437eca9456e0eeea7246fc7923ed0bfca64ea1ecd661907b2e14b2cc1Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1848e33ddbb8ebd91def2e4c6db284a78e6e8a0d9b2b75a81681b32427f3cea8560Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-14T01:00:32.075563525+00:00",
  "latency_ms": 969,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "3a642ab0eb0cc5028f7af8cbd451a8e465a5853f22ff842277f1466a00c12f040000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "e0bd8509b2933835230dcd153107064fce0e33d27939b8650e6c4193805a51ad",
    "artifact_set_digest": "f03a063f4ed6f1bd98e64699029776be46eab7126534867879a1ae9428295c4c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:32.200955695+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939632078",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:32 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:32.833714474+00:00",
      "sha256": "8e33ddbb8ebd91def2e4c6db284a78e6e8a0d9b2b75a81681b32427f3cea8560",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:32.834592431+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:32.989369805+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "8b1475e437eca9456e0eeea7246fc7923ed0bfca64ea1ecd661907b2e14b2cc1",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:33.045056496+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360ab1d5759bbb70b0f2d3ec16c16cc04b7a811fe7401727e63fe8b9d4b144cbcd0Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d0d10edabc84a162c1cda5f063d294d670448392ea4d4c929faf02c895d0242aOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-14T01:00:33.045416321+00:00",
  "latency_ms": 933,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "c52a94d258ce205fc4f2ae4434e41592effa43a5a3bca3b7fd741418d6acd5420000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "74e36f979fa2883d3022b2d3270ff1873a79fb9edf94f63e844ece03e2532d06",
    "artifact_set_digest": "533ed136b505ce3fa2fa0de3c04dd85ddc94dc3bc20bb495ae8efde92777f331"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:33.172142174+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939633048",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:34 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:33.778310593+00:00",
      "sha256": "d0d10edabc84a162c1cda5f063d294d670448392ea4d4c929faf02c895d0242a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:33.779080628+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:33.928014596+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ab1d5759bbb70b0f2d3ec16c16cc04b7a811fe7401727e63fe8b9d4b144cbcd0",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:33.978286486+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json3605b533cf9d6d1a05a3937711b69ec7a62694e71ab1a6d85bf4a38e22b6769de8aOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d80bb0db5ab6bc01a27ee9003f2b62b3f8e6809ca753c3bbf1ee4cf23ec2bbb5Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-14T01:00:33.978648986+00:00",
  "latency_ms": 960,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "3fd70a8d1b026cfe50c56f4254aba90368617b148072e92a1b86de3c668f57740000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "a7fea8ad6abbe2b6a97029b681185e4d5ecfce2dabec5c1d5a9acd0f8fe8988a",
    "artifact_set_digest": "d03ece3660b057f7e5bc81e87dc19d8ec36765f9f5002da29ceeec3a50573be0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:34.109279796+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939633981",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:35 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:34.740623620+00:00",
      "sha256": "d80bb0db5ab6bc01a27ee9003f2b62b3f8e6809ca753c3bbf1ee4cf23ec2bbb5",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:34.741373016+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:34.888819543+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "5b533cf9d6d1a05a3937711b69ec7a62694e71ab1a6d85bf4a38e22b6769de8a",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:34.938683497+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360c891c946727680342e73e679429f85aa8024a54766059f159b997b38804dd059Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846f0df1fae1472f40e4af1eb94cbbbd28520b051507dc0501a11a82348c5b7c8fOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-14T01:00:34.939069742+00:00",
  "latency_ms": 937,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "06aa73d61af1c48c4e25f2814b4537f18a8be06368c1d3e1ae357bc746f617fe0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "77635fecc6d01987ff78f2ed247bbd71f71090edb7476b9e102d1a2080f3387f",
    "artifact_set_digest": "610707496c8831b4a742b0207090386866441d20d885e02bd9f22c8f7afb7f2f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:35.065174418+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939634941",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:35.671111203+00:00",
      "sha256": "6f0df1fae1472f40e4af1eb94cbbbd28520b051507dc0501a11a82348c5b7c8f",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:35.671840622+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:35.823545700+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "c891c946727680342e73e679429f85aa8024a54766059f159b997b38804dd059",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:35.876059698+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360fdf86c54c480b1105e2fd461d6e477f888e61eeadceabcb74baed2de957f8928Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1849e67337048d8b67e96627ac56ab6214ac3db4f015002d1f4d5c19080d5fedf99Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-14T01:00:35.876397441+00:00",
  "latency_ms": 992,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "ee84b721f2e0c3a627f7856772b13d5a67f2d36f851ca55947c6ecbbd00507de0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "224b8bfb22a4b3e4da452b3c138f3d2b72b311d77d7de7566eaba0b249bc2a18",
    "artifact_set_digest": "fc9b1158a3a9fb7c3f8c642d638528b25baed837767234ea0541d042b11122e1"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:35.939693602+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939635879",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:36.652683051+00:00",
      "sha256": "9e67337048d8b67e96627ac56ab6214ac3db4f015002d1f4d5c19080d5fedf99",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:36.653422358+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:36.811580597+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "fdf86c54c480b1105e2fd461d6e477f888e61eeadceabcb74baed2de957f8928",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:36.868896846+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360668438ee82ced8ba1820879154f3d6e611fb158ecb3c035daa1d38b10685d611Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841a3ddabbd4a46b944e850f54b2bf097f13b3b60b30fc3018b5f0ca632f0f95faOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-14T01:00:36.869311253+00:00",
  "latency_ms": 967,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "442236412856b9054191e8d3690e14d58cc5f3f6a49ac0fdc1b855c5b306454e0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "5f3e4b404cf79089af77956f789cce539f10992611431cf7c5862ce7731828f6",
    "artifact_set_digest": "6b7d5290c7440a5fc19fb58c1a2e6cce0abffe8c3938866a54aa5fbb988bd70f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T01:00:36.984876011+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791939636872",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 01:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T01:00:37.629679763+00:00",
      "sha256": "1a3ddabbd4a46b944e850f54b2bf097f13b3b60b30fc3018b5f0ca632f0f95fa",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T01:00:37.630421605+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T01:00:37.781670187+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "668438ee82ced8ba1820879154f3d6e611fb158ecb3c035daa1d38b10685d611",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T01:00:37.836304072+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}