Stored Run Record

Run #2992

Completed Oct 14, 2026, 21:00:47 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

DeepSeek OCR 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3606f466abecad277841e22ce6906a7d5041feec55f3579c9f9732d6388b4801de8Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184310b7029285fedb4a455ea8cb33eab939b92286abda4facb52fa41ce31511528Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "DeepSeek OCR 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-14T21:00:36.658496783+00:00",
  "latency_ms": 1224,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "b3dbc5d4fe90b0eafc84d79857db4b36c3e31e6ce1a78a706bd9678210571d720000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "71c48c8078400b61b7a08e3d1fa5dce3f24e7e7456de2f6eac53bacdd2a56837",
    "parsed_evidence_digest": "989decc8cd9713287ff4945c39ef2fe87dd671b5ae207767deafcadba7631a7e",
    "artifact_set_digest": "f6308b358015316f8ca5e40fb5b4d16c1ea104c25197dbda6ba79cc798484474"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:36.965612422+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011636664",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:36 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:37.655536638+00:00",
      "sha256": "310b7029285fedb4a455ea8cb33eab939b92286abda4facb52fa41ce31511528",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:37.656454230+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:37.823871414+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "6f466abecad277841e22ce6906a7d5041feec55f3579c9f9732d6388b4801de8",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:37.882747414+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

GLM 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json36067c96135872ed190403c0805d42057f74f03fa6500c9e0700a29020374549df7Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1849d055f7c14971e2026596b3383dc98922b9d8e0b77ab0da27029a15cf1f4645fOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "GLM 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-14T21:00:37.883251861+00:00",
  "latency_ms": 1009,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "630b11083fc7000f92c97c837209fd64fbd27e2d0a806036e9636a283339c8cf0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ced3f1e26e8590c87956ece768d6a4c5cee2a28093b883451726e60f05845852",
    "parsed_evidence_digest": "a2c96ba5ac8976dbc83bce855df17a79113c18868e4bb1fb96930580cdd24520",
    "artifact_set_digest": "4f145bc79e00fabed6c572983c118719250cc693a4d41bdf2cfff3ffb035a693"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:38.017605145+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011637886",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:37 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:38.676741013+00:00",
      "sha256": "9d055f7c14971e2026596b3383dc98922b9d8e0b77ab0da27029a15cf1f4645f",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:38.677995266+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:38.835096220+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "67c96135872ed190403c0805d42057f74f03fa6500c9e0700a29020374549df7",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:38.892342161+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

GLM 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579Open
privatemode-secret-handshakeapplication/json3608d71727164d3c7afc984145b3b11ce5491fc00acdce6727e9e8406732e8f0ee3Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18474d856cd828092244b994272110116a350cfabd15de119e272f41cc4c0abd0c2Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "GLM 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-14T21:00:38.892845425+00:00",
  "latency_ms": 889,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "11495177e7796396bc5e4b8f239727ae12d8e8b0a7c2d3866d14adc385d931db6ec9ac27810cf8b8593e6c278c16dea882036abbf6820bc4ebf10e9a8f44fbf9",
    "report_data": "67064ef7a295f8367a28b42af54ceb3add781aa6d19f73a43f602109c80842260000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d779d2fd2bd0a77c38858f4eddc7cb201a79aca380f46d93b6a5350f18682717",
    "parsed_evidence_digest": "72e0ffa5c11e8a2ed1b4df3a6385bca2db65c2a31fd56f3046aa8c474cf1be45",
    "artifact_set_digest": "95fefdb72bb782469861da37bdf9f14eca8e19c195e483cb5bd7b007d8299aea"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:39.011107893+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011638895",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:38 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:39.583075216+00:00",
      "sha256": "74d856cd828092244b994272110116a350cfabd15de119e272f41cc4c0abd0c2",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:39.583819663+00:00",
      "sha256": "434fd58803bc0ab55c4942e933817bed64c98ec7b8dcb28e5ccc4d087a4a5579",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:39.733329471+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "8d71727164d3c7afc984145b3b11ce5491fc00acdce6727e9e8406732e8f0ee3",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:39.781780296+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

GLM 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3605f213dbce7971895fb3dcec0cf413a134d690e763491a6d5b6df9d4e88f304c0Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184ab47c3335c272b252a6ed33087f6c8804b4b2a9a34309ddcc120a0b9ca832ac4Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "GLM 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-14T21:00:39.782504885+00:00",
  "latency_ms": 962,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "9de51969d6daed726349cafeafc3a0477a558529b1d9c7346b1e1c693c0163e80000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ebd05d90c3bc30b9c3162b007e8330b5ce345d30fec9286282b9a91677753357",
    "parsed_evidence_digest": "4e82317bdbeb3ce1424ce7b7509a457f1400237aeb36f1433d1744c4218cb45b",
    "artifact_set_digest": "0ee7b90b7bd0423fec443552ca0d66a8950e23bffbdd0ca87409d37b0f7e0747"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:39.898675377+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011639785",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:40 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:40.530585592+00:00",
      "sha256": "ab47c3335c272b252a6ed33087f6c8804b4b2a9a34309ddcc120a0b9ca832ac4",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:40.531537388+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:40.689039194+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "5f213dbce7971895fb3dcec0cf413a134d690e763491a6d5b6df9d4e88f304c0",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:40.744783326+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

GLM Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json360b3f40459eb972f7eabe22c276a47a2dbc6c2064601b666d3138e1daa277693e4Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18420a6e5794114b9a94976f480acaa343bf8858208db5af0f505eb02f63571211aOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "GLM Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-14T21:00:40.745306528+00:00",
  "latency_ms": 904,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "22200383bdacc95ca14bb12cd2650976a963babe903d4a5d9e766fd29a3ca32e0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "0f3fb07cd55a4f3ff91c16046bf9cd0dcfac6007e71a4da4cd81ba2a1dc35382",
    "parsed_evidence_digest": "a51f6a5ab69afee57e8339f7b95a2332177c8c5024f6b274a66ac224262f73a0",
    "artifact_set_digest": "ee25a923a496b42f6921709022f3e70802b54829cc7bf60d470610d68ff3e382"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:40.867027686+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011640748",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:40 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:41.445149820+00:00",
      "sha256": "20a6e5794114b9a94976f480acaa343bf8858208db5af0f505eb02f63571211a",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:41.445891381+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:41.597138159+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "b3f40459eb972f7eabe22c276a47a2dbc6c2064601b666d3138e1daa277693e4",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:41.649334984+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

GLM Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3601a73bea9759a447ddbd2a2d4d266ed68a33c9e2105e59f3d5273bb54b0dcbc2fOpen
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1843e74d4a8366a5be0873dc0d399359a6f7331c8af16f967a8622877022b5844f9Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "GLM Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-14T21:00:41.649792743+00:00",
  "latency_ms": 944,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "155343d54df667c726a01bf6ae6ca6d68b9deff327215cc9ea74f5510d8fb7ba0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33fb9ca79161b18312f02f74d2b89c4c2f884f89648370dadd0470b7d4a40d39",
    "parsed_evidence_digest": "4e30b532b2a89dddd88b698189a72f8554c0dcf187bbbc63b7a094f031a47914",
    "artifact_set_digest": "4b7961be12c4e6c4bd8be615c71601dd111b0e15bc9ead000311a2ca92dc66e6"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:41.776406272+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011641652",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:41 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:42.387431684+00:00",
      "sha256": "3e74d4a8366a5be0873dc0d399359a6f7331c8af16f967a8622877022b5844f9",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:42.388185088+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:42.541945051+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "1a73bea9759a447ddbd2a2d4d266ed68a33c9e2105e59f3d5273bb54b0dcbc2f",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:42.594000501+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

GPT OSS 120B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json36032cddf4d20a342496737b16027a130a7168c1a3fcf407f083b61376ceae791c0Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1849766a849336206b50fbbce47aac43361acaa2757136185138cca5a0e71e62553Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "GPT OSS 120B",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-14T21:00:42.594486323+00:00",
  "latency_ms": 996,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "4f30bdda377a9188cd7c01abee4d1a22fdd71429d48fe8a3e9b1ff8a6853d68e0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "2d72f45c4da9081b61da84ab7d457f2cd185febbf2189492478b4b6fbb4a228a",
    "parsed_evidence_digest": "5dec40f82fb6fe4d1183d630dd74a66e7cf6b8223f75a00af0182e00406f73b0",
    "artifact_set_digest": "0090a71c8455b3717b217e45ffcb711c3fe9d894e7cd8dcc35af21e40ecda023"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:42.675261891+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011642599",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:42 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:43.374034012+00:00",
      "sha256": "9766a849336206b50fbbce47aac43361acaa2757136185138cca5a0e71e62553",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:43.374764653+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:43.534575472+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "32cddf4d20a342496737b16027a130a7168c1a3fcf407f083b61376ceae791c0",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:43.590712342+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

GPT OSS Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json36016f818125efe150240f00ea8144ec39061613f1744dcca82638ab0b27e8af9f7Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184179af6ab91b19267718edccc36f65d9885f64e841ed3caa4ad3b136ded5f46b1Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "GPT OSS Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-14T21:00:43.591166895+00:00",
  "latency_ms": 903,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "f6e40b180abb4507bdc9ea8caee2680ed728e65648f8af5c82d92dda027f097a0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "1c63bf7702085034ddfe2fb65cd129a5bec92a15c27ddb578cd431e32a96d67d",
    "parsed_evidence_digest": "1965a6efd1f76bb8b130b069905c1f8dbbeac0ad0235146f784fa822c80be866",
    "artifact_set_digest": "2a143919e1b70f6056e6170d27a6d99df5c046623873da8cf1ec1e04178f5159"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:43.714436919+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011643594",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:43 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:44.290412795+00:00",
      "sha256": "179af6ab91b19267718edccc36f65d9885f64e841ed3caa4ad3b136ded5f46b1",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:44.291170457+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:44.444059747+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "16f818125efe150240f00ea8144ec39061613f1744dcca82638ab0b27e8af9f7",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:44.494642984+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3472301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477Open
privatemode-secret-handshakeapplication/json3605525a4377389ff90924bf6073ff56e58aa6f40aa0205eb1ff4af9708ca95a630Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1840645b213d104d0587b4a25398b24b028d350d1fae1bd4764a2e7546209a1a6beOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4B",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-14T21:00:44.495148933+00:00",
  "latency_ms": 959,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "06b3977c15c8e92e9897ebc3a0be1e6ef6e2e70f9b57a327854f8e735a608ec1e528821c2fa770e0dd175cfd421e492c45a164457c4c669674b695368c08d36d",
    "report_data": "c427ba0b376d4168dea4f0681b4c23fea47bffc8ea18c9e41217b88072f684c80000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "457a5f6f2ae8b2304d9563a24894dca128ea0a094c0c8490fe634dcb73f4f6a2",
    "parsed_evidence_digest": "5538ba6cfc66ce93019e764f9f8c25bc490bb7a39fd99d5176acafa50d31c535",
    "artifact_set_digest": "2bccf1d71c4604b223b6198556809f510c6c9e5926e6640048a14a1e29e378c6"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:44.611395277+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011644498",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:44 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:45.236436932+00:00",
      "sha256": "0645b213d104d0587b4a25398b24b028d350d1fae1bd4764a2e7546209a1a6be",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:45.237333946+00:00",
      "sha256": "2301be8a99a40c6e9e66fea55036af88bb8f8662293aeb87f62432861054d477",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:45.398034474+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "5525a4377389ff90924bf6073ff56e58aa6f40aa0205eb1ff4af9708ca95a630",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:45.453894194+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3B

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json360334723a46ba37a091af9ee0605c387cf5b53318ea5eef0a0aba2079332181825Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184b463c4572ba1f6b7fc1cba6fec11e63a50d8f35254adad000dd802887f6ed510Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3B",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-14T21:00:45.454412667+00:00",
  "latency_ms": 908,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "4f1d5af07403ee1df5bcaa2e131878d65f0e2c70dc7614cc5d086495a617967b0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "cdecbbf7b7078c7146acf53af91da2973b1cd64ed28260452cc2aba602cd7a7a",
    "parsed_evidence_digest": "d492b0d8a8df4475d04a5e9d27272c93b63ed5d4c7180127554580e1c4d71c9c",
    "artifact_set_digest": "b9b0797d481841e5b97df6f21079f92218a9699799bdeb9b19f65295d570a8af"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:45.573944206+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011645457",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:45 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:46.146644434+00:00",
      "sha256": "b463c4572ba1f6b7fc1cba6fec11e63a50d8f35254adad000dd802887f6ed510",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:46.147537019+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:46.311521461+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "334723a46ba37a091af9ee0605c387cf5b53318ea5eef0a0aba2079332181825",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:46.362394582+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01Open
privatemode-secret-handshakeapplication/json3601423ec1755d1a6f0ffc1eb8400c8f9e6f8ab45fedd46c36d73a2cd1b2a9c6fb3Open
provider-manifest-responsebinary/octet-stream5,9929f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2aOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184bdfb68df78277fc0907f4e1d3eaa5ed1e47e2641a3554cc1058f9e88183a3af0Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-14T21:00:46.363159708+00:00",
  "latency_ms": 954,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "e1ad38a7d9de36bd9189ec6889e4b5a895532c52978acf1ab1014833def3cd8c0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "07c95fa862548dc123b5637c797d28ddfc1372be42bec821a69f82c7e5cdc3fe5f4fb692f2ee51d7e28ff6dcf9c09745",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01"
  },
  "version": "v1.25.0",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
    "contrast:v1.25.0",
    "snp-generation:Genoa",
    "SNP/Genoa:07c95fa862548dc123b5637c"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.25.0",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "8f5e8f0fb75fb7c67b60c52383abe0db578830acefb9f4d21d2338e970b3027a",
    "artifact_set_digest": "d4becbcb2a3c6e863fac75625c02e7058d0be2ce2ddb9064745bab2115a5b973"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-14T21:00:46.489479195+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1792011646367",
      "sha256": "9f5ac6bf38431fb073c2185bd9b344140e776b4f7c32eee595716e9456bdec2a",
      "size_bytes": 5992,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 14 Oct 2026 21:00:47 GMT",
        "etag": "\"235667119480ca11eac53e7a6c7a3456\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Tue, 13 Oct 2026 08:55:08 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-14T21:00:47.104633325+00:00",
      "sha256": "bdfb68df78277fc0907f4e1d3eaa5ed1e47e2641a3554cc1058f9e88183a3af0",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-14T21:00:47.105578168+00:00",
      "sha256": "d0e0b91de50a855f6738094476b3db4dcb44fb94d9da877cef06518230b7ff01",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-14T21:00:47.262417230+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "1423ec1755d1a6f0ffc1eb8400c8f9e6f8ab45fedd46c36d73a2cd1b2a9c6fb3",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-14T21:00:47.317186523+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}