Stored Run Record

Run #2982

Completed Oct 14, 2026, 11:00:41 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3605a08188548156884517f0c65dfc78e16878d521ce5eed1eead37cd7d1cc6ec8bOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18452fe993c7fca38d2b2a95bf513d84fa26b1a8340002a5d0a417a5ffc73008beeOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-14T11:00:29.975906506+00:00",
  "latency_ms": 1186,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "1a400e8508fe748bdb0dba586635e82f40e7af151abf700bff30fef34e6d09960000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "f8050bd06a79b280edb1847e6cb546ec50858909bef08d0735ad1c02b28f18d0",
    "artifact_set_digest": "a237a2045f7c64d3b0c1c7a79385a1951658f245d4e535eb395e7cc346e23960"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:30.261519972+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975629983",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:30 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:30.931393908+00:00",
      "sha256": "52fe993c7fca38d2b2a95bf513d84fa26b1a8340002a5d0a417a5ffc73008bee",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:30.932625820+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:31.104016008+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "5a08188548156884517f0c65dfc78e16878d521ce5eed1eead37cd7d1cc6ec8b",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:31.162441813+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360c9822a405f948ee29bf9c7063e52f863ecb6de28b8bd0b686df95748c06fcbe0Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184c5ef67c24aaba1761dc318a45052f5867e83308e59eb18a321c3ba07fa2f5c5cOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-14T11:00:31.162915472+00:00",
  "latency_ms": 946,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "c024176222007a07cbf555b78ca8d40e795e892e433669c2c8a5c3822cfb44430000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "3753cf5d3f330cec862f1e8088a578033efe805481e84c1439d4c6267900ba6c",
    "artifact_set_digest": "6882d9f4f4a5e95330e26c1f1fe05f40d7ec7e44384549e25ca68a944efcb487"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:31.301986829+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975631166",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:31 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:31.900693540+00:00",
      "sha256": "c5ef67c24aaba1761dc318a45052f5867e83308e59eb18a321c3ba07fa2f5c5c",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:31.901540790+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:32.060480504+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "c9822a405f948ee29bf9c7063e52f863ecb6de28b8bd0b686df95748c06fcbe0",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:32.108593254+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json36035a405b561be77b62822731428ef09e45d6ce560f91aa75773a467e3e0051840Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d9a4f2a82dc0acd3155deaf5449f0475d5a29a7919db12f29025ec670e2d64f0Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-14T11:00:32.109066072+00:00",
  "latency_ms": 986,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "439a46d303758d8c02a21e3a8b066b90469e6931d931493c8f271539ed0cf2de0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "9c3b006904ba49613095073d49e2cea957a675091e80d1e16cf042079d9b4dc1",
    "artifact_set_digest": "c5bc2cc6bcb7776e172c84e1d3a5a458529ed30b2f1c5a3f76b33761f037fd30"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:32.247041232+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975632112",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:33 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:32.877051558+00:00",
      "sha256": "d9a4f2a82dc0acd3155deaf5449f0475d5a29a7919db12f29025ec670e2d64f0",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:32.878174295+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:33.044261733+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "35a405b561be77b62822731428ef09e45d6ce560f91aa75773a467e3e0051840",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:33.095444755+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360251ef8146b42ef4fa98e6273e9cbecc71ffc90554b6b4ccebd56ebe552c6e5faOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1844375343925d55dc9e5c3541d42f08d58ffd9b8ae09119d63c3365e29a1f934b7Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-14T11:00:33.095956165+00:00",
  "latency_ms": 972,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "1efc92f7ca3cf66d3bfec0e44f2ab909897fdcda07c31ccd72ef69ea76bd269c0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "c40385ca10d5c70ac0634e19d67f9a192ba7c8d3e6c2b5817ee7c61c3603f026",
    "artifact_set_digest": "7a1245076d3ecd77f76e717f83d14bb2e573444d0e818f9d98e802ef3b7b7c81"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:33.219931172+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975633099",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:33 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:33.857254052+00:00",
      "sha256": "4375343925d55dc9e5c3541d42f08d58ffd9b8ae09119d63c3365e29a1f934b7",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:33.858149131+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:34.014769162+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "251ef8146b42ef4fa98e6273e9cbecc71ffc90554b6b4ccebd56ebe552c6e5fa",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:34.068076721+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360cbce206d8e511266fd478b3b312ecd745fdb6f1a847e21ecbbea50ed808feca3Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184af3ad9133906426eb15cfa580e23e45e1a9706a0f02997372ef429e7d52da718Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-14T11:00:34.068681205+00:00",
  "latency_ms": 998,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "22d61cffaa70e32185f68e1de3b0e983fed7defbc863e3e0363fa9cdfc8a09890000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "54b6a03e88f8142e70c220d9e12faa6d9c999313b5f7cd4aac407cd0cd2d9189",
    "artifact_set_digest": "29bffe1085402d85025e9c5549d8c70629c8bc3f19a5458f586e98105a6100cb"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:34.211281536+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975634072",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:35 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:34.866676931+00:00",
      "sha256": "af3ad9133906426eb15cfa580e23e45e1a9706a0f02997372ef429e7d52da718",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:34.867477774+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:35.018599816+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "cbce206d8e511266fd478b3b312ecd745fdb6f1a847e21ecbbea50ed808feca3",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:35.066598563+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360b31e2827b7998b4841094b109e81f3659359df9d1a6a06b74abb77ac1a92b0f1Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846862a7e8a6f81b422a3bc904753cdb564b469f745d330473c7ad80493e492e77Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-14T11:00:35.067521395+00:00",
  "latency_ms": 1015,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "a143fbf9e9bc3ff4077ba98fd84e046ddd3e4559b73d901797bab37350f17f910000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "cb25c55ae4c4c023f1ffe5a54bc590c76e3d787b849fffd3ba394e871a170e2d",
    "artifact_set_digest": "1eae36daefa75f7cbe8f7fb5c8c9a707e5b11629fee0cea4d194e76e77ed23fd"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:35.126390592+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975635071",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:35 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:35.854372195+00:00",
      "sha256": "6862a7e8a6f81b422a3bc904753cdb564b469f745d330473c7ad80493e492e77",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:35.855190832+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:36.022209266+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "b31e2827b7998b4841094b109e81f3659359df9d1a6a06b74abb77ac1a92b0f1",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:36.082277373+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json360a41d65107f8d22d8a7d83588dfa0fe8671eeb97a7f607cce122c57ccf20e099aOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18444d76ec924cc9fc892261060ba142178b429fbde8f0d6f355fc3e887e2cc1e83Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-14T11:00:36.082735573+00:00",
  "latency_ms": 1039,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "509e6f32a90f174862b654fd5b9e2a4a3d6a683fca9a9b11255df906a3b3fbc90000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "2c07582e75570fa27faa70fcd6e4aec6c8299d01e0675fb21072611ad3856f3e",
    "artifact_set_digest": "8b10a2ad72d87ba52afc9cf9f05eb4f4a549c5e824194555274acd209b39fbdd"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:36.196425709+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975636085",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:36.900026438+00:00",
      "sha256": "44d76ec924cc9fc892261060ba142178b429fbde8f0d6f355fc3e887e2cc1e83",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:36.900979246+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:37.066611379+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "a41d65107f8d22d8a7d83588dfa0fe8671eeb97a7f607cce122c57ccf20e099a",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:37.122154714+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360ac8be41b550dce73c274976e1819f10d6c01a007c338a7a01a8b7e5506466e0bOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1841411e6e25f8464a75bbd242802460d778eb545d165ed7564c91598b602e2aedbOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-14T11:00:37.122575434+00:00",
  "latency_ms": 1118,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "8d82e4ebbd691a63c76b33cca2b9be79b54da6c848ef51ff9e0387f01ad2d5250000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "138ced54107961247e6c09ba612d4c93eeac405f5e6277c3ce0c7bf3e0210809",
    "artifact_set_digest": "dfd9fb4965c41b69627fccb19f26eb545218bc054ead17594f23451458338566"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:37.249910196+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975637125",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:38 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:37.996019850+00:00",
      "sha256": "1411e6e25f8464a75bbd242802460d778eb545d165ed7564c91598b602e2aedb",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:37.996959834+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:38.177005246+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ac8be41b550dce73c274976e1819f10d6c01a007c338a7a01a8b7e5506466e0b",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:38.241124865+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360ee1408b4f330092a775abd0e056e57904e77f5811a0e5c2a98b9f5b95b88999cOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184a871ae1fed6d66d61a353ecc6f42229ef5eb79c41aeb34ccddb233c553cb48ddOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-14T11:00:38.241596350+00:00",
  "latency_ms": 1022,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "14db1dd6bc6ab016b9cff19aed8529f902bf4c594b5ae73cbff5a55ef4040c950000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "5402abe82c698109914a03ac52f468054f6d58a3e13b7076b644547053cec2db",
    "artifact_set_digest": "b7e5386893242571d0023c7cba6785d781f7f561cbb14fb27e4a579ca6bab9d1"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:38.369091283+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975638245",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:38 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:39.042824692+00:00",
      "sha256": "a871ae1fed6d66d61a353ecc6f42229ef5eb79c41aeb34ccddb233c553cb48dd",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:39.044711203+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:39.206901015+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ee1408b4f330092a775abd0e056e57904e77f5811a0e5c2a98b9f5b95b88999c",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:39.263424420+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360c1918051a85d1567e43e688a3be141e6ed38fbdfb76645ac0e3f74ae8433396fOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18482fec95d8d1f88080b5b8c7b558f20ace57bea8a49810e179ac0cc080895dfe5Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-14T11:00:39.264076604+00:00",
  "latency_ms": 914,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "fd23f56d9f52ca5ebf6c369f495cd7384ae965a94fc9269f3956f514836d16b40000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "b643a164ef152241893a321abc0114743ae93d95be422a0c486731a28e2a420c",
    "artifact_set_digest": "4e9f9687153adb17bf931763ed0393ef0f77f1f7bcd5d5183165bd9dd7c0656d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:39.402503051+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975639267",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:40 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:39.965478377+00:00",
      "sha256": "82fec95d8d1f88080b5b8c7b558f20ace57bea8a49810e179ac0cc080895dfe5",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:39.966368848+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:40.122069242+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "c1918051a85d1567e43e688a3be141e6ed38fbdfb76645ac0e3f74ae8433396f",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:40.178022898+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json3600e984435a701e5b0ec87b6a24faf29f66284120b4de366002e8671302faf964eOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184c2de8276031d5e78bcb5808ab3ed9bb920fd587c72722dc99f88545cce4567f6Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-14T11:00:40.178479324+00:00",
  "latency_ms": 1027,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "e9de32069c1626d9cdbd775e725e118ec71ea8f81415e3684ef1239b632aefd50000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "87eb45dffd095b3fe97cfdfb37913e3bf513cc116cd03f62bea466af227fa6f8",
    "artifact_set_digest": "fbb7127a096557934b84e3c9977ea747d726f4d71ec49686921ffc858032f5cf"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T11:00:40.298450427+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791975640181",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 11:00:40 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T11:00:40.980372373+00:00",
      "sha256": "c2de8276031d5e78bcb5808ab3ed9bb920fd587c72722dc99f88545cce4567f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T11:00:40.981182584+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T11:00:41.147312401+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "0e984435a701e5b0ec87b6a24faf29f66284120b4de366002e8671302faf964e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T11:00:41.205158958+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}