Tinfoil
deepseek-v4-1-flash
DeepSeek V4.1 Flash (router-verified)
Captured evidence
| Kind | Type | Bytes | SHA-256 | Artifact |
|---|---|---|---|---|
| amd-vcek-certificate | application/pkix-cert | 1,347 | 6bc576a11ae68ab3df933a35d63970d62ef55a883f2f8e4a269c73e8f1439499 | Open |
| provider-attestation-response | application/json | 673 | b67da62461a3142f96ffa5b566e2ac898647073c03d3a68e5751c2e357aa198a | Open |
| provider-ehbp-keys-response | application/ohttp-keys | 41 | 3c5e1a2fa3a3991adf110e83a237c80003afffe14501e9348236321d568d4b7a | Open |
| provider-inference-probe-response | application/json | 109 | 253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc | Open |
| provider-inference-probe-response | application/json | 137 | fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df | Open |
| provider-inference-route-headers | text/plain; charset=utf-8 | 76 | 179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246 | Open |
| sev-snp-report | application/vnd.amd.sev-snp.report | 1,184 | 8897952f05cb1555e2468c510861c8d86b56681b997118074966b2d5c83d4881 | Open |
| tls-leaf-certificate | application/pkix-cert | 895 | 35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03 | Open |
| verification-error | text/plain; charset=utf-8 | 77 | e0818795414549ded0fe0700fb030ce01437b585f80bf890f1e524a356276b34 | Open |
Sanitized target
{
"provider": "tinfoil",
"id": "tinfoil-deepseek-v4-1-flash",
"label": "DeepSeek V4.1 Flash (router-verified)",
"type": "tinfoil",
"url": "https://inference.tinfoil.sh/",
"host": "inference.tinfoil.sh",
"model": "deepseek-v4-1-flash",
"metadata": {
"repo": "tinfoilsh/confidential-model-router"
}
}Parsed decision JSON
{
"provider": "tinfoil",
"id": "tinfoil-deepseek-v4-1-flash",
"label": "DeepSeek V4.1 Flash (router-verified)",
"model": "deepseek-v4-1-flash",
"status": "unreachable",
"ts": "2026-10-15T01:00:35.798151079+00:00",
"latency_ms": 15133,
"error": "Inference route probe for deepseek-v4-1-flash could not be observed: HTTP 429",
"snp": {
"chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
"report_data": "1fb743c49aa79fff8ee99d216d7e1c3a7ac1d8d769af6e55b59954ae4951d9d7f7557ebf2f26636653c88fb32893c18af301527bea29a67626f01349e7788a43",
"measurement": "9b5493714af482656d43d963774da1185a611dac14a46a03cfbde5a2984201a9d41fc2b6a5f81b806e58acae104226a6",
"family_id": "00000000000000000000000000000000",
"image_id": "00000000000000000000000000000000",
"generation": "Genoa",
"current_tcb": "bl=10 tee=0 snp=23 ucode=84",
"reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
"policy_bits": 196608,
"platform_smt": true,
"platform_tsme": true,
"debug_allowed": false,
"vcek_fingerprint": "6bc576a11ae68ab3df933a35d63970d62ef55a883f2f8e4a269c73e8f1439499"
},
"images_verified": true,
"tls_fingerprint": "74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77",
"tls_matches": false,
"version": "v0.0.158",
"report_data_binds_signer": true,
"sigstore_match": true,
"sigstore_bundle_verified": true,
"sigstore_tag": "v0.0.158",
"release_digest": "8daaecd40cd29b45d508d7250feadf5e3eff555cb6fadd58131c996598007e97",
"sigstore_repo": "tinfoilsh/confidential-model-router",
"config_images": [
"ghcr.io/tinfoilsh/confidential-model-router@sha256:374f63524bfe61cbfa21a5377e2b95634f049e60d09b9c61c56e32f24ca31d36",
"ghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a"
],
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"e2ee_public_key": "f7557ebf2f26636653c88fb32893c18af301527bea29a67626f01349e7788a43",
"e2ee_key_algo": "hpke",
"trust_tier": "none",
"e2ee_capability": "hpke",
"route": {
"route_binding": "not-verified",
"router": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Tinfoil router enclave attestation verified at inference.tinfoil.sh."
},
"workload_operator": {
"organization": "tinfoil",
"confidence": "declared",
"evidence": "Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."
},
"tee_platform": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."
},
"upstream_model": "deepseek-v4-1-flash"
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "not-proven",
"detail": "No verifier-owned challenge binding was exposed."
},
"channel": {
"state": "verified",
"detail": "The application channel key is bound to attested evidence."
},
"workload": {
"state": "not-proven",
"detail": "No expected workload measurement was verified."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "not-proven",
"detail": "No request-bound storefront-to-backend route receipt was verified."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
"target_hash": "d34ec61b0a4764b4c8df87fc1cf33ece8590fa934f9a65181dd6af5035b46f29",
"parsed_evidence_digest": "1c7e72c5851770e0539c7c99e806c013549b84888f65a78929b3a1c1233db2a3",
"artifact_set_digest": "746ca4188497f28cc22b8048b13e5b1108ef20cad39d6439908cd17dc5739917"
},
"evidence_artifacts": [
{
"kind": "provider-attestation-response",
"media_type": "application/json",
"collected_at": "2026-10-15T01:00:36.290831319+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "b67da62461a3142f96ffa5b566e2ac898647073c03d3a68e5751c2e357aa198a",
"size_bytes": 673,
"encoding": "binary",
"metadata": {
"date": "Thu, 15 Oct 2026 01:00:34 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "sev-snp-report",
"media_type": "application/vnd.amd.sev-snp.report",
"collected_at": "2026-10-15T01:00:36.454250867+00:00",
"sha256": "8897952f05cb1555e2468c510861c8d86b56681b997118074966b2d5c83d4881",
"size_bytes": 1184,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh"
}
},
{
"kind": "amd-vcek-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-10-15T01:00:36.455585842+00:00",
"source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
"sha256": "6bc576a11ae68ab3df933a35d63970d62ef55a883f2f8e4a269c73e8f1439499",
"size_bytes": 1347,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh",
"product": "Genoa",
"source": "amd-kds"
}
},
{
"kind": "tls-leaf-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-10-15T01:00:37.214603126+00:00",
"source_url": "https://inference.tinfoil.sh/",
"sha256": "35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03",
"size_bytes": 895,
"encoding": "binary",
"metadata": {
"host": "inference.tinfoil.sh"
}
},
{
"kind": "provider-ehbp-keys-response",
"media_type": "application/ohttp-keys",
"collected_at": "2026-10-15T01:00:39.148333019+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/hpke-keys",
"sha256": "3c5e1a2fa3a3991adf110e83a237c80003afffe14501e9348236321d568d4b7a",
"size_bytes": 41,
"encoding": "binary",
"metadata": {
"date": "Thu, 15 Oct 2026 01:00:36 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "provider-inference-probe-response",
"media_type": "application/json",
"collected_at": "2026-10-15T01:00:39.602647765+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc",
"size_bytes": 109,
"encoding": "binary",
"metadata": {
"date": "Thu, 15 Oct 2026 01:00:41 GMT",
"http_method": "POST",
"http_status": "429"
}
},
{
"kind": "provider-inference-probe-response",
"media_type": "application/json",
"collected_at": "2026-10-15T01:00:42.766713025+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
"size_bytes": 137,
"encoding": "binary",
"metadata": {
"date": "Thu, 15 Oct 2026 01:00:40 GMT",
"http_method": "POST",
"http_status": "429"
}
},
{
"kind": "provider-inference-probe-response",
"media_type": "application/json",
"collected_at": "2026-10-15T01:00:50.931308590+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "fb84f323b36f553bddd2de02a7d09f3295f9b8be513c73f9733d7f4cbb0908df",
"size_bytes": 137,
"encoding": "binary",
"metadata": {
"date": "Thu, 15 Oct 2026 01:00:48 GMT",
"http_method": "POST",
"http_status": "429"
}
},
{
"kind": "provider-inference-route-headers",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-10-15T01:00:50.931381096+00:00",
"source_url": "https://inference.tinfoil.sh/v1/chat/completions",
"sha256": "179b1a900e371be4ed739ba6bfaddc786199e0da263c354544e9569f831b9246",
"size_bytes": 76,
"encoding": "binary",
"metadata": {
"model": "deepseek-v4-1-flash"
}
},
{
"kind": "verification-error",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-10-15T01:00:50.931653768+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "e0818795414549ded0fe0700fb030ce01437b585f80bf890f1e524a356276b34",
"size_bytes": 77,
"encoding": "utf-8",
"metadata": {
"check_id": "tinfoil-deepseek-v4-1-flash",
"provider": "tinfoil",
"status": "unreachable"
}
}
]
}