Run #800

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-deepseek-ai-deepseek-v3-2-tee",
  "label": "Deepseek Ai/DeepSeek V3.2 TEE (TEE)",
  "model": "deepseek-ai/DeepSeek-V3.2-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:17.828852202+00:00",
  "latency_ms": 8044,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "49f68c4b587dcc83f7cbcb4325c8bd00ed1410a4c777b6bb977e17076e7477034ee5bf1460a32d7af699cb2198f867a7f75eb68be143e7c10965d673c7be2fa7",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "49f68c4b587dcc83f7cbcb4325c8bd00ed1410a4c777b6bb977e17076e747703"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026031300-7f2b15c9e6e9"
  ],
  "manifest_workloads": [
    "chute:deepseek-ai/DeepSeek-V3.2-TEE",
    "instance:2ae8dac9-c810-4317-b449-87048f6ded9f",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:a7e62ac04ecb2c0a54d736dc46601c5606cf10a6",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:d63d064c-4add-5213-b278-d3125c8078fd",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/398651e1-5f85-5e50-a513-7c5324e8e839/evidence?nonce=400e1515bb8767f06c12e0e2e1cda09b71a6296152e6b291e6c8a50579eb7c16",
  "signing_public_key": "ml-kem-768:2ae8dac9-c810-4317-b449-87048f6ded9f",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "07bf2a3a9d8e95343a0c35405effb4c1e365c255c5556a2cd0680484579524aa",
    "parsed_evidence_digest": "6c6b3a8b69fd1c82c279863f420988a8297b07707186899dbd949b9505f00f3d"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-google-gemma-4-31b-turbo-tee",
  "label": "Google/gemma 4 31B Turbo TEE (TEE)",
  "model": "google/gemma-4-31B-turbo-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.785304923+00:00",
  "latency_ms": 19847,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "2d51fb72241b104968924b9861a664b513e4c91e3d0da189bba5545a2ca5ef145a798a590b5a86ecd2c99c6e89b489a390430544b0828076099ec0aebad24289",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "2d51fb72241b104968924b9861a664b513e4c91e3d0da189bba5545a2ca5ef14"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:google/gemma-4-31B-turbo-TEE",
    "instance:5d43824b-115a-4c45-8e6d-7f4faa03c395",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e5ef03afa233c35cb000323ff098d4291e1dd07c",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/42ee92ba-a537-5a73-8741-876067750db7/evidence?nonce=cb8d36012afd05ae5bb202d6ee1b8ce55f12dbbcbc039e97f4291f384cafe725",
  "signing_public_key": "ml-kem-768:5d43824b-115a-4c45-8e6d-7f4faa03c395",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "d00f9b114e76f734d4ce1702b85a8c3f96d553260ec27ce558cb545096d6ee24",
    "parsed_evidence_digest": "80f0a8414676ff760148e4f4b0735b52411de74f82a3d431c11d6921e49738ee"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-minimaxai-minimax-m2-5-tee",
  "label": "MiniMaxAI/MiniMax M2.5 TEE (TEE)",
  "model": "MiniMaxAI/MiniMax-M2.5-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:45.267912820+00:00",
  "latency_ms": 7739,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "093bc25ae506a74ed7b2ecfdb7f4c25c3e5b93aa25929053f6006c4b9ff12592547717537a4216cf6a61a37a128ffee2b435b6205c7de68bf996a06e8c4caeb1",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "093bc25ae506a74ed7b2ecfdb7f4c25c3e5b93aa25929053f6006c4b9ff12592"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026043000"
  ],
  "manifest_workloads": [
    "chute:MiniMaxAI/MiniMax-M2.5-TEE",
    "instance:7178e1ce-0a4f-4e88-b083-a891d64b96ca",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:37649bdaab7de76902236a546b2df436a93a33ba",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.5",
    "image-id:fef3b089-b516-5c04-bf72-ae56ad48492a",
    "image-status:built and pushed",
    "image-chutes-version:0.6.5"
  ],
  "source_url": "https://api.chutes.ai/chutes/ce6a92e4-5c2f-5681-9742-c80a4447bbdf/evidence?nonce=e6cb9215de6e03a3694ea3f4be2eaf2c22beddb2fdf27069a7d89b99699be132",
  "signing_public_key": "ml-kem-768:7178e1ce-0a4f-4e88-b083-a891d64b96ca",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "d2ffad2aaff903c7c6ef3173b1d910a92cf46ee94f4ee48eff29a1ed296c1d54",
    "parsed_evidence_digest": "0976a5e50a906521465538beb44d80b63c97eb9f9613f4b1e4c7ed926243b140"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-moonshotai-kimi-k2-5-tee",
  "label": "Moonshotai/Kimi K2.5 TEE (TEE)",
  "model": "moonshotai/Kimi-K2.5-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:40.417247768+00:00",
  "latency_ms": 7785,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "d8d807d00bd82f3040e6bd9015af49dac030fecf971e2a2b53cbebbc0a2d2bf1cfa86086896c3806fdd8569aaa0d175c600889f9636a99584ddc25b3421712ed",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d8d807d00bd82f3040e6bd9015af49dac030fecf971e2a2b53cbebbc0a2d2bf1"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1b"
  ],
  "manifest_workloads": [
    "chute:moonshotai/Kimi-K2.5-TEE",
    "instance:494ffed9-4efc-4c96-8e6b-7e4e74911aaa",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:3367c8d1c68584429fab7faf845a32d5195b6ac1",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/2ff25e81-4586-5ec8-b892-3a6f342693d7/evidence?nonce=13657a785be4267764a138c31bb534909c00e58689763f94bd7e19ac2d922594",
  "signing_public_key": "ml-kem-768:494ffed9-4efc-4c96-8e6b-7e4e74911aaa",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "2d2211f35445f701e203b3d619de2a4fd012cc919c293130cd4830ac1370938d",
    "parsed_evidence_digest": "e12fbd0796fff7ebc026a0b64304a2e033d24a5a6a00783864e9eef0889a1f5c"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-moonshotai-kimi-k2-6-tee",
  "label": "Moonshotai/Kimi K2.6 TEE (TEE)",
  "model": "moonshotai/Kimi-K2.6-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:36.248499623+00:00",
  "latency_ms": 9019,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "1fca02275acaabbd5872e31cd5609b823595f4448bfab468bf69995f51d4e15166da067b87bb126f6217c126c31e87427f2223e6907e5f3bd3fcdc67960e5779",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "1fca02275acaabbd5872e31cd5609b823595f4448bfab468bf69995f51d4e151"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/vllm:nightly-2026031400-03df6abfe49f"
  ],
  "manifest_workloads": [
    "chute:moonshotai/Kimi-K2.6-TEE",
    "instance:0d613d4b-9abb-4edd-942a-33f19ddbedc7",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:d9cb81bc88b9bd2dc89877599f23c614ded72b9c",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:5bbb13bc-c050-518d-bb55-79994b540ec2",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/aac09863-35b4-5d9b-9b67-6e6a9d54273a/evidence?nonce=b2f4e54a467e216d265f2cd68b2be667bfea672459ec2200b3e26f25ff81eafe",
  "signing_public_key": "ml-kem-768:0d613d4b-9abb-4edd-942a-33f19ddbedc7",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "ec64250c1bc814c2afb985778508120b91381f1fd745302fc79024fe96c73730",
    "parsed_evidence_digest": "2f0f5d530b0139fcf736a795c75d60202c7e548369a60a242e1e53ce3389d25f"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-235b-a22b-thinking-2507-tee",
  "label": "Qwen/Qwen3 235B A22B Thinking 2507 TEE (TEE)",
  "model": "Qwen/Qwen3-235B-A22B-Thinking-2507-TEE",
  "status": "unreachable",
  "ts": "2026-07-16T12:04:38.961127564+00:00",
  "latency_ms": 1456,
  "error": "Chutes evidence returned HTTP 400 Bad Request",
  "source_url": "https://api.chutes.ai/chutes/21d129e5-8426-5c29-a6be-844e0f5f5e30/evidence?nonce=70a43e31a3c86f06a558f0097b2bd93f6182b5b23ae12b55ea0966a5444261e4",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "5cd9d9c30899bb0cc6a08da52ee5e9f97892a326fec5c5639125ccfae64d04f6",
    "parsed_evidence_digest": "67f97d951a126ad187c888b4cfc35d3153d7f9e10a94af490626ad6eb17e7d8f"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-32b-tee",
  "label": "Qwen/Qwen3 32B TEE (TEE)",
  "model": "Qwen/Qwen3-32B-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.784786230+00:00",
  "latency_ms": 5868,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "014138e1fdaf36ee613b5f7bfc4865a50e49d53405c23442811053026ffbfa46fa785f5425f697e6c90df0bcd74bbbb0ea91a59bc95144d19f51caccd45f8a74",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "014138e1fdaf36ee613b5f7bfc4865a50e49d53405c23442811053026ffbfa46"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3-32B-TEE",
    "instance:5f728efc-b826-4c4b-92b0-8529a44d3378",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:aa55da1ecc13d006e8b8e4f54579b1ea8c3db2df",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/ac059e33-eb27-541c-b9a9-24b214036475/evidence?nonce=71da7ea538f2dd49c6875baad45b71a608cbb47a8f04312d2b98caf21f2d18fb",
  "signing_public_key": "ml-kem-768:5f728efc-b826-4c4b-92b0-8529a44d3378",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "c891eaf0bcc3badb306b83762cce633e1f2be6ab0bc2a5dce18c5eb853b25a0d",
    "parsed_evidence_digest": "827138c291e266f3ce877d29645699dd097b9622dfb2e0735584e1a623b49d43"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-5-397b-a17b-tee",
  "label": "Qwen/Qwen3.5 397B A17B TEE (TEE)",
  "model": "Qwen/Qwen3.5-397B-A17B-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:17.633252988+00:00",
  "latency_ms": 9973,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010400000000000000000000000000",
    "mr_seam": "489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "850c66265817126e554333735036add40d742b03c974aaf59bb4c211f5711da64099311254c0ed4caee7e3da654b5551ab7c563b862e3f09eda05892ca46988f",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "850c66265817126e554333735036add40d742b03c974aaf59bb4c211f5711da6"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1b"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3.5-397B-A17B-TEE",
    "instance:39568e6b-c126-4d65-bf67-0ab1c0d788e5",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:9f1f3de9a3a48cfd340fd73ca98c02625b7afb3b",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/51a4284a-a5a0-5e44-a9cc-6af5a2abfbcf/evidence?nonce=f4602b07239f563dbd4ff5ff3a466f0980f094e3c8e7417f6c59efd8b68f1034",
  "signing_public_key": "ml-kem-768:39568e6b-c126-4d65-bf67-0ab1c0d788e5",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "bce90b0775287652c0edaa7ad4c619f46742562363203ce1885e679d136dbaf7",
    "parsed_evidence_digest": "b0ccb7fc4dfcfd92098f3c6ac30a8d52eacd5eb01a465f0b39410d60cf38f4ba"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-6-27b-tee",
  "label": "Qwen/Qwen3.6 27B TEE (TEE)",
  "model": "Qwen/Qwen3.6-27B-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:03.653001072+00:00",
  "latency_ms": 14175,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "64666559fb844c7c3eddb78e4ced1bffd70740f70efedc8d577ccf104a3e2b84c659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "64666559fb844c7c3eddb78e4ced1bffd70740f70efedc8d577ccf104a3e2b84"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3.6-27B-TEE",
    "instance:5e0de849-004a-43f8-b614-3afed94996d6",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e89b16ebf1988b3d6befa7de50abc2d76f26eb09",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/7aa5e899-c0ba-5482-af48-d3f31d635c9f/evidence?nonce=02325c27617c993d395820218f31f50973e1b6b3b6d0a56de194972ff1562510",
  "signing_public_key": "ml-kem-768:5e0de849-004a-43f8-b614-3afed94996d6",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "2666b65ef0f7a94c047038f447c54b93d44ffa0d4f10a7fb0c8fc37b2d74ad7a",
    "parsed_evidence_digest": "ac8e5a3883c27d19dcae1b86f47b9b98b9393a352d86caa46cc54f1591482339"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-unsloth-mistral-nemo-instruct-2407-tee",
  "label": "Unsloth/Mistral Nemo Instruct 2407 TEE (TEE)",
  "model": "unsloth/Mistral-Nemo-Instruct-2407-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:34.627943126+00:00",
  "latency_ms": 4333,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "b782519aab8ca9db5b94a1d100e1fcac890532071bb137678b885c3fece3318cc659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b782519aab8ca9db5b94a1d100e1fcac890532071bb137678b885c3fece3318c"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"
  ],
  "manifest_workloads": [
    "chute:unsloth/Mistral-Nemo-Instruct-2407-TEE",
    "instance:a3866ade-226c-41a5-8231-89de33590c4b",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e9976040f42d8a5590ed58cefe973061b3f973b5",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.8",
    "image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e",
    "image-status:built and pushed",
    "image-chutes-version:0.6.8"
  ],
  "source_url": "https://api.chutes.ai/chutes/7725a31d-28df-5bb7-9d29-c23b49df5472/evidence?nonce=4c8c748e0d1ef54c9e027108180d3202ffca5a1c613aa615da6300568a4438b2",
  "signing_public_key": "ml-kem-768:a3866ade-226c-41a5-8231-89de33590c4b",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "390946768b31d16be5209974bdc32623c7760125bfe7c1516a9d8a5312ccd8b9",
    "parsed_evidence_digest": "9b6a52f4acec8a2166f031705ad39089c7cd3116a9427a3b519c3fa04e58cc2c"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-1-tee",
  "label": "Zai Org/GLM 5.1 TEE (TEE)",
  "model": "zai-org/GLM-5.1-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:25.873690454+00:00",
  "latency_ms": 8754,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "ddc6efcdd2309e10837f8a7f64b71272b7ef003b129460410fe715bdfffec38c7c0c1686dddb2a23d4fd623d145e8455",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "77c862b2b70987b5352bec2a9ea38465d7818157c3136486806c67703d2e8142f4ce20f618ea7000dc9e5412aaedef6d663b8dd81b18fd0800c4cb2665109451",
    "rtmr0": "2864b11878e8129095d62a5dd7c3e3aae178d3a077606a825617324768f189ad05aed08376947df92d6c75865d915cbf",
    "rtmr1": "f858ed2aecba4ecd29084352c6b5c6e403c0bec89b8c852f90fa5a8cee796ffa095518c5cd8b92c25c1856e932a95877",
    "rtmr2": "7719f4fde518994a5dd6767a8b8b87a38168cc0f3480e7498d4ace99e49319be6a7fed26c21ad43310d2d488fc68ab1c",
    "rtmr3": "bfac8bbe97148d00c0bc5dea273ccd926e2415511f08f5dedaa96d3c19e824d2bf01fae86e8987ff509fd3ad31374a60",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "77c862b2b70987b5352bec2a9ea38465d7818157c3136486806c67703d2e8142"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026032100-6483b7da6ccd"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5.1-TEE",
    "instance:eac1a301-47fd-4c45-a1c4-c61a470f79e6",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:f396cf805182f4ca10fa675e1a99815b3ca384db",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:ae476f71-ed8f-562e-b1af-49d49c948d6f",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/b048fe26-0352-5c46-acf7-335e527e7f3d/evidence?nonce=9859bf513c0c0de1abf69197288703e98931e984885124d5e3c29a8d191e82a7",
  "signing_public_key": "ml-kem-768:eac1a301-47fd-4c45-a1c4-c61a470f79e6",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "69ef3de27eaf4a117b372e2e5eed01426b7db527f5e868cf09ab8ccc70dd7a00",
    "parsed_evidence_digest": "44835492b0974b869b8b4389ef6471fcf72ac4534e635199959515edcba7b667"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-2-tee",
  "label": "Zai Org/GLM 5.2 TEE (TEE)",
  "model": "zai-org/GLM-5.2-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:27.607016056+00:00",
  "latency_ms": 8641,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "07030400000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "675a94a78fd66f3f66458c6db3d6e3133d820057ba33bea9f52c7812771a5083722be30e147f151cb2d5d406081b8b5cba67b176c241bb87f26a62bc79793114",
    "rtmr0": "35038cbb04f872ac6d2784b05c912c438007583e58960dc66fb02d1b04462dd5994f94536da37b5877ccd3dd27d8d54d",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "675a94a78fd66f3f66458c6db3d6e3133d820057ba33bea9f52c7812771a5083"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.15-post1a"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5.2-TEE",
    "instance:f38a1220-734a-4553-86e4-d466cd69bc33",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:aec724e8c7b8ee9db3b48c01c320f63f9cdaf8aa",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:e5589f58-64d3-51f6-8a3d-146b1cd77940",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/08901219-159f-55a7-87cf-9d0d02744668/evidence?nonce=4c8bbe65ff438f86909cbddd62911516a83390014d92ddb11f61b9eaa2558400",
  "signing_public_key": "ml-kem-768:f38a1220-734a-4553-86e4-d466cd69bc33",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "010b8b43fb30d29f74d3c217877ddb6acfba8ce6854102a780d9bbb856d1275b",
    "parsed_evidence_digest": "61979c5016fbc69cb07624fd6111311a5108ff3137695d98dd1987eb461ad48f"
  }
}

Target configuration was not retained.

{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-tee",
  "label": "Zai Org/GLM 5 TEE (TEE)",
  "model": "zai-org/GLM-5-TEE",
  "status": "partial",
  "ts": "2026-07-16T12:04:48.202865470+00:00",
  "latency_ms": 6860,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010400000000000000000000000000",
    "mr_seam": "489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "3f6a4cc03e9f01cbf836d9f539c1fa16641e3d67796b3b1d6bd1da835cdff1fa44a8df888a1a040ae04314cee9f765205d855d05894e9e721e1a8525ba0ba844",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "3f6a4cc03e9f01cbf836d9f539c1fa16641e3d67796b3b1d6bd1da835cdff1fa"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5-TEE",
    "instance:03aabc20-7230-4761-bf57-e9e5cedb685c",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:949e09d70b611943740a3d79a0f46a63947498a6",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.8",
    "image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e",
    "image-status:built and pushed",
    "image-chutes-version:0.6.8"
  ],
  "source_url": "https://api.chutes.ai/chutes/e51e818e-fa63-570d-9f68-49d7d1b4d12f/evidence?nonce=e77c91550a6a3740103772a08bb1532a4edf5ef7e93de726cb9e0b919cac7fee",
  "signing_public_key": "ml-kem-768:03aabc20-7230-4761-bf57-e9e5cedb685c",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "9135e6f03592a4caa16574be2e6edac58db27edc10d2973b2ce1d74ea15fb45f",
    "parsed_evidence_digest": "af0352e6e5072a74ab91693a6bc0419c093086a121c0cac5c8a53eb4b86d450b"
  }
}

Target configuration was not retained.

{
  "provider": "maple",
  "id": "maple-enclave",
  "label": "Maple Enclave (AWS Nitro)",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.784280110+00:00",
  "latency_ms": 1969,
  "error": "Evidence incomplete: No Maple workload/PCR provenance policy configured",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://enclave.trymaple.ai/attestation/1ec6cfdb-073f-4904-9fc8-38f0a53fee81",
  "signing_public_key": "x25519-nitro-enclave",
  "signing_algo": "x25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "x25519",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "maple",
      "confidence": "declared",
      "evidence": "Maple service endpoint."
    },
    "cloud_host": {
      "organization": "aws",
      "confidence": "declared",
      "evidence": "AWS Nitro attestation format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "3f0f1c752de53089fc3d5a2bbdccd41277f8c84d10ec064bec4c96df794cd9d6",
    "parsed_evidence_digest": "5d079c521e4cbd7892a6fff1d3b503c31ca0ff68426354db8e119f528e4cd605"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-deepseek-v3.2",
  "label": "DeepSeek V3.2 (TEE)",
  "model": "TEE/deepseek-v3.2",
  "status": "partial",
  "ts": "2026-07-16T12:04:19.208233546+00:00",
  "latency_ms": 1484,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000916e00e080184bf495b25330c6397f4d2294e7a5f6c8419cb862bfba34cec03b",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.2",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v3.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "cd7f4cd83e32e3715c4968413e7153ea88c5878d62af09c54167c2e96599c536",
    "parsed_evidence_digest": "bf71c8cd83761ee74565926976260270ac0c5b05a25654c03e702dfb8b47bb3d"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "TEE/gemma4-31b",
  "status": "partial",
  "ts": "2026-07-16T12:04:02.984281755+00:00",
  "latency_ms": 2039,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07030600000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "ad017f09ec425f1783266895ee2d17f31d565b1e77f9a910963ede0874d0300a58264e488c7aec13e3a7ca0ecd40e6869eabfa0df5f4076af96710db4ec48672",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/gemma4-31b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "dafc1e915f589dbdb0ea448c0c9c96070b5b5834019f45f595d26be64f8f4ea8",
    "parsed_evidence_digest": "19393fe6035458849073b686e4e57b3548ac453775cab2f6eedc986b49cf1e6e"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "TEE/glm-5.1",
  "status": "partial",
  "ts": "2026-07-16T12:04:05.023953227+00:00",
  "latency_ms": 3186,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008ff405ebd4272689300a2b67f31d98c8dcdc961094e0107f5bd317f08d2c3bc9",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.1"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "b067e40884a3ac9f74277deb22536929798c34f55129750cbe807bb5b351c1f4",
    "parsed_evidence_digest": "320f2574e6a1a48ac5e9a4a897f68a7ae45c7c464152d238376bb09364fca492"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "TEE/gpt-oss-120b",
  "status": "partial",
  "ts": "2026-07-16T12:04:00.503613504+00:00",
  "latency_ms": 2480,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004f9d6283d662616e06b80595aae2bc5b0d3c2dd4930fe74b72dea38b67a89c82",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-120b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "fcb028798628584e45b783a356839253a060d185930916a3445e2d473d0a1dd7",
    "parsed_evidence_digest": "1c69f9d3426553759160b2cbdd8338ed19f4159c807d105c98c595de6258d7be"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "model": "TEE/kimi-k2.6",
  "status": "partial",
  "ts": "2026-07-16T12:04:08.210293140+00:00",
  "latency_ms": 1400,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000984fdfa7e614fbd84c0f684129ed508213ecc57929a11bc01915940765715451",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.6",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/kimi-k2.6"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "bdfbbabeb5f736ddb6481e58bf3ce03bc771262935bce71d74c87432f448beb0",
    "parsed_evidence_digest": "610b4a319940a55dfa031a66af2b2763b7d3ea4e34c3bc0c65deb5ee30f9f2a1"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "TEE/llama3-3-70b",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.783302105+00:00",
  "latency_ms": 2720,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "33ba742af8c74e48a0383ff1fe0e44a16b803372e42629f18531175106ea4eb4"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fllama3-3-70b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/llama3-3-70b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a227546dd52bb67b54532ca7074de4ea5346958d4275957f268cb86e95edb7d3",
    "parsed_evidence_digest": "a5afe24a681fc2709f1a8f5cd0e374f35b4598ec7ab9c1ed99774f7068d138dc"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-qwen3.5-397b",
  "label": "Qwen3.5 397B (TEE)",
  "model": "TEE/qwen3.5-397b-a17b",
  "status": "partial",
  "ts": "2026-07-16T12:04:09.610526976+00:00",
  "latency_ms": 9597,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "9dc3a54fdc9eca45e50be361a451d2336d646fc6e6bce96e8f14dd585c80384ce8fde1a51010d4c9182da07ca1f3fda1463326929f0cb7478ca00a6893f4bb07",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-397b-a17b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.5-397b-a17b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "656469b1d08ed8fb3fed7417c3e3fb5a8895efae74c9a0196e1e215d85213116",
    "parsed_evidence_digest": "3690c77d8df12df9ea58ac968ccc7a7ee0698ded11a4ac39257da87debcf5c94"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-deepseek-v3-1",
  "label": "TEE/deepseek V3.1 (TEE)",
  "model": "TEE/deepseek-v3.1",
  "status": "partial",
  "ts": "2026-07-16T12:04:20.693083005+00:00",
  "latency_ms": 2624,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000da4c71e0675e5a53951b3e39fdfe066c97cc97cb2a111b309279497ca0bcacb3",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.1",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v3.1"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "3532db4bf9f480dbdff716dba87bbb3913dd7c3b73a2389c993473631c728090",
    "parsed_evidence_digest": "913d9d70dd39d46f78a7c9e715c14fa4018a97a63633c786c1ff01dd875ad83c"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-deepseek-v4-flash",
  "label": "TEE/deepseek V4 Flash (TEE)",
  "model": "TEE/deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-16T12:04:23.317809979+00:00",
  "latency_ms": 1509,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000013c7d93b6658c3fc961b60f595474c98ceba466eabafd24c8c07d443f2947aa8",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v4-flash",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v4-flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f62c84b53e79bf950d328ca361ae74e5b7d0cb811fb5f1c638bcf593ec6da71b",
    "parsed_evidence_digest": "c137f8b768005fa54ab67a854d06244557f91b5071ea58ce3a50a4040a3f363c"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-3-27b-it",
  "label": "TEE/gemma 3 27b It (TEE)",
  "model": "TEE/gemma-3-27b-it",
  "status": "partial",
  "ts": "2026-07-16T12:04:24.827760682+00:00",
  "latency_ms": 1540,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000090646e4cb75424c724a7246e119aba11f3d933ffe85afd10023a0803c8b204f",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-3-27b-it",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "2f14050215dfc8edb5fc522fc7996b563f09f671386a388a12baa5efdbfcdc87",
    "parsed_evidence_digest": "ec27032f0f434aa2bd4f127f63c2937057e9e622be5e79e7cca25213963a467b"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-4-26b-a4b-uncensored",
  "label": "TEE/gemma 4 26b A4b Uncensored (TEE)",
  "model": "TEE/gemma-4-26b-a4b-uncensored",
  "status": "partial",
  "ts": "2026-07-16T12:04:26.368008401+00:00",
  "latency_ms": 2675,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a003559629aacfba4efb25645daa1774978ac14cbbf775a1918b2e4a590eb8cb",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-26b-a4b-uncensored",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e48a1d4b4f00b371f4faa292befb0d2cb42adeadd3bd12588b5b1748afe39b75",
    "parsed_evidence_digest": "76d16821441a5d742ea613b5633c28609f6292905e31ea3a350d7f8cc12838bc"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-4-31b-it",
  "label": "TEE/gemma 4 31b It (TEE)",
  "model": "TEE/gemma-4-31b-it",
  "status": "partial",
  "ts": "2026-07-16T12:04:29.043960094+00:00",
  "latency_ms": 1541,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000007ce64ba73a4a06765db6fc36f7a96c22602a1e81585101bd65aad3f82b6c6226",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-31b-it",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-4-31b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "36310e994e0dc12660ebe49dc9a902f8a858dfe9f029fa46f238ba4c95d70d45",
    "parsed_evidence_digest": "6d8581d5657d04ad5ae355cc0560f9f81a2ae9476f5ae72b44fee9be9973efc3"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma4-31b-thinking",
  "label": "TEE/gemma4 31b:thinking (TEE)",
  "model": "TEE/gemma4-31b:thinking",
  "status": "partial",
  "ts": "2026-07-16T12:04:30.585285165+00:00",
  "latency_ms": 1843,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07030600000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "b73f27085c4f7fa0f0c2ba10807892ddaa855d7f5d4aba4555efde63b5542dee6112a74212ddd4f0ce202c17492c9c492b65ede64c629e1c5705d414b6c12113",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b%3Athinking",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/gemma4-31b:thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "ca1449c38f11150cef44a4716e506bfcd838ce5e02121dbd8117a696d4e2acc0",
    "parsed_evidence_digest": "2c4b024ee29681546b507edace16978ae1f0bd7db2382af212fd50ec74b1298f"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-4-7",
  "label": "TEE/glm 4.7 (TEE)",
  "model": "TEE/glm-4.7",
  "status": "partial",
  "ts": "2026-07-16T12:04:32.428482505+00:00",
  "latency_ms": 2848,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008c22ff622500ff391fdd35db6c4a2e1be26efde2863cfc521330abae2d74f52b",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-4.7",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-4.7"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a6f1ab3963de81dadf7300aac1133c09c0b9df799ad50aae9f701f425df15c32",
    "parsed_evidence_digest": "888460febb5741f15c60c01043b4969fb3afd552b4082f85f76916f3bc435f0b"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5",
  "label": "TEE/glm 5 (TEE)",
  "model": "TEE/glm-5",
  "status": "partial",
  "ts": "2026-07-16T12:04:35.277100657+00:00",
  "latency_ms": 8169,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0d010400000000000000000000000000",
    "mr_seam": "489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "9efb691fc81b07b40358ab4d9d21cc445e1de9028afc9fccad9c5637cd24196744a8df888a1a040ae04314cee9f765205d855d05894e9e721e1a8525ba0ba844",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "afff96018f528c3c1d3dc8bdb3b9aa27a6ce389ebde780909e82cb50b2d873af",
    "parsed_evidence_digest": "1f517565f545b47f82428c6896e99fec73eb77cd8da6fd5d8cbe391afc5625cc"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-1-thinking",
  "label": "TEE/glm 5.1 Thinking (TEE)",
  "model": "TEE/glm-5.1-thinking",
  "status": "partial",
  "ts": "2026-07-16T12:04:43.446666594+00:00",
  "latency_ms": 3040,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000084f8f6371f2d7c46e31d69b57b560848b64397aa4065ad1bd8152d073e3bf1a0",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1-thinking",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.1-thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a0cad05852b955e0872bf3bf3e8a6270d534c186d48f2cacb67226432e66a4c7",
    "parsed_evidence_digest": "94dce8b62f2077de49caf65ed0eac6f46602819fdb8e7d2d5ef2ce821abd7d48"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-2",
  "label": "TEE/glm 5.2 (TEE)",
  "model": "TEE/glm-5.2",
  "status": "partial",
  "ts": "2026-07-16T12:04:46.487031041+00:00",
  "latency_ms": 2781,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000fc58ea7cdc1befb186c141b9f7ab63e460ea58ea3bd85883ea25cbcd022a80f4",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0fc72635adc746e0d6726a82526be5e2aeb42659f8766ce5a4ed0be4672264b4",
    "parsed_evidence_digest": "a6d2b9e4e571a6c5b177dfe152c9fd1cbc40e29e3aae6de9e16b9c6b2bcfd23c"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-2-thinking",
  "label": "TEE/glm 5.2:thinking (TEE)",
  "model": "TEE/glm-5.2:thinking",
  "status": "partial",
  "ts": "2026-07-16T12:04:49.268933324+00:00",
  "latency_ms": 2774,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000ce9aa06f1f97c4406009d6a3065b0b1db424574479b8238dfbc9b6f617ead4be",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2%3Athinking",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.2:thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "bff62b8094234a52d485afd245e0f18ef6280ff4e5f9e0866a35b90f7b5cc378",
    "parsed_evidence_digest": "5510a4b8b7e9fccb50cc502c8c2e48c106fbcec767faae655dde984f7d973d78"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gpt-oss-20b",
  "label": "TEE/gpt Oss 20b (TEE)",
  "model": "TEE/gpt-oss-20b",
  "status": "partial",
  "ts": "2026-07-16T12:04:52.043028645+00:00",
  "latency_ms": 1397,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000009aea347ee6bca5b1a3725bc95a6c2edb8b6545a47222c170d3f0fd375f11eca8",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-20b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "11e9839237034b0fa7b467f146b33c0dea22574c596e7c715f22df210be16c1a",
    "parsed_evidence_digest": "41935143f0f7808ceb3a848b708736350157b00ef64b0c1d737e6174626223eb"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-kimi-k2-5",
  "label": "TEE/kimi K2.5 (TEE)",
  "model": "TEE/kimi-k2.5",
  "status": "partial",
  "ts": "2026-07-16T12:04:53.440818364+00:00",
  "latency_ms": 10942,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "f5894b883071c3013493f6b9d28b06db9178d53f263b48fb690a0f1790fa7211cfa86086896c3806fdd8569aaa0d175c600889f9636a99584ddc25b3421712ed",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.5",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/kimi-k2.5"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0412ef7134ac709c3f251d5179017f6d6fdcf3843a3966364b32ca329a4e5ff7",
    "parsed_evidence_digest": "f3dd1aa94955e003946fa4e3444a546a9e3fc7078cf658d5ca65df6f5527fb4a"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-kimi-k2-5-thinking",
  "label": "TEE/kimi K2.5 Thinking (TEE)",
  "model": "TEE/kimi-k2.5-thinking",
  "status": "partial",
  "ts": "2026-07-16T12:05:04.383349342+00:00",
  "latency_ms": 7564,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "bc0fe0ae1e9480062b7480af0c4b86e94b9b35842c6f35b1d5d1b926c3e0d428cfa86086896c3806fdd8569aaa0d175c600889f9636a99584ddc25b3421712ed",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.5-thinking",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/kimi-k2.5-thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "4f621246a3dedb5cfe18332a2eb657dfa3d17a5654dda1f785ea003bd55576ec",
    "parsed_evidence_digest": "e793c5b4ba420ac93c8122561e807e930ea8a4035651dedf78cf782e76244ea7"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-minimax-m2-5",
  "label": "TEE/minimax M2.5 (TEE)",
  "model": "TEE/minimax-m2.5",
  "status": "partial",
  "ts": "2026-07-16T12:05:11.947574835+00:00",
  "latency_ms": 7090,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "f6b639f1f92d35c17e0c8f5db4c5c4589db8821f52d0e0a035894ee4b0bf2df4547717537a4216cf6a61a37a128ffee2b435b6205c7de68bf996a06e8c4caeb1",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fminimax-m2.5",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/minimax-m2.5"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "28ba1d077d20a3bf1d1fbd65f4e2504b8670667082397388a16b4d4ef39e49a6",
    "parsed_evidence_digest": "f042be479f34a5d3fa11f44259e9e6a8ee46cbc53432b65d843bbb202eac322e"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen2-5-vl-72b-instruct",
  "label": "TEE/qwen2.5 Vl 72b Instruct (TEE)",
  "model": "TEE/qwen2.5-vl-72b-instruct",
  "status": "partial",
  "ts": "2026-07-16T12:05:19.037628488+00:00",
  "latency_ms": 1658,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000003453b50a415ac78be2801b87da5f3609cbbabeab852f498380159727a5141742",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen2.5-vl-72b-instruct",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen2.5-vl-72b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a525219e649f0fd207a94b79c145255f3cabed23a5d562b75243521c2755e62d",
    "parsed_evidence_digest": "37f05111261aa42db14997b2de81cebbfc9bd19e31d99a6cbc08e4f87cde3914"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-30b-a3b-instruct-2507",
  "label": "TEE/qwen3 30b A3b Instruct 2507 (TEE)",
  "model": "TEE/qwen3-30b-a3b-instruct-2507",
  "status": "partial",
  "ts": "2026-07-16T12:05:20.695898570+00:00",
  "latency_ms": 2986,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000003c2b18e060effec11784f59fb1f62cddabf81dfbb999d694e16bcfd6f3c2290a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3-30b-a3b-instruct-2507",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3-30b-a3b-instruct-2507"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a2f689f5aae23dc2970883a2d9dd449fff93c830e72292d7c1df984d50c21eff",
    "parsed_evidence_digest": "a71a88324bab52a8e5efe25f0e05391171d2e18c9abec932b76c26f2c1509b36"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-5-122b-a10b",
  "label": "TEE/qwen3.5 122b A10b (TEE)",
  "model": "TEE/qwen3.5-122b-a10b",
  "status": "partial",
  "ts": "2026-07-16T12:05:23.682234346+00:00",
  "latency_ms": 2995,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001fd036a9d472e4b2d221927517e430e67d117998a0bd38862c8cf48421ac9dca",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-122b-a10b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.5-122b-a10b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f89eda7ffbb85ca69a40962b5628f1f079e897e1a072a98384e4e35ca4969716",
    "parsed_evidence_digest": "b7975ff6fcc5d29cc2300e4e478e78de448661034c903d7a0be0eafd2026ebb2"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-5-27b",
  "label": "TEE/qwen3.5 27b (TEE)",
  "model": "TEE/qwen3.5-27b",
  "status": "partial",
  "ts": "2026-07-16T12:05:26.678119042+00:00",
  "latency_ms": 8665,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "5fb5da1ed9ce8b44224aa2383463887cd23931e97fd65f9fc347b53804e54c5dc659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-27b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.5-27b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0a8c6a760131181bd3bd0a2b64a15faf157fde4b889291d9a467bf1a121fbb87",
    "parsed_evidence_digest": "4dae3d7c0e7a63b5a92aa22d855166e80ba7a3dab03dca18c47ef0d659da2134"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-27b",
  "label": "TEE/qwen3.6 27b (TEE)",
  "model": "TEE/qwen3.6-27b",
  "status": "partial",
  "ts": "2026-07-16T12:05:35.343176618+00:00",
  "latency_ms": 3099,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004f5c180ce18e6b2d849cb354c70e3cf074eb5efa95f9f4981474ae468c61325d",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-27b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-27b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "875294333242454856e620cafb6a28081d0c30d656799e4243651d15739f21fe",
    "parsed_evidence_digest": "543a6f8207b4ba91b5efe96ae6b96d70c89bb725e05e0be5dcae14e37f97c09a"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-35b-a3b",
  "label": "TEE/qwen3.6 35b A3b (TEE)",
  "model": "TEE/qwen3.6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-16T12:05:38.442801385+00:00",
  "latency_ms": 3134,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000c694250b40e6be05ac621c7d3bb21a0574574be4ed6242439db80f354e7804fb",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-35b-a3b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "8ab6d0571e75116067dab0955a5ac41b6a8e78efd8d283b8e720fa70a10eb7a9",
    "parsed_evidence_digest": "b7883653f252974c4b13fefc4595151d6cb8a12aa2568200304072b81f702419"
  }
}

Target configuration was not retained.

{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-35b-a3b-uncensored",
  "label": "TEE/qwen3.6 35b A3b Uncensored (TEE)",
  "model": "TEE/qwen3.6-35b-a3b-uncensored",
  "status": "partial",
  "ts": "2026-07-16T12:05:41.577084411+00:00",
  "latency_ms": 2261,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000056b7ae3733b6b7a65d50e15e15dac3c8a7ba403c4815ea88a937c66216634e14",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b-uncensored",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "124c7ef35ce1006a7f41432ded498933ef89a6ae721c12e460933d74b7849546",
    "parsed_evidence_digest": "a28f613031b7cb6206ea1e8472f688906224ada6981bee56b96603ee3598eaa2"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-gemma-4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "google/gemma-4-31B-it",
  "status": "partial",
  "ts": "2026-07-16T12:04:22.974524472+00:00",
  "latency_ms": 5846,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "2ad96997ac5762e37f81b72c404c21f0d6baa53a9c6b8872113fb42716710b9b991c2e4d5fa0c185776286b4be07009579b806644a95aa3bc68fb7cbc4d89da1",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "991c2e4d5fa0c185776286b4be07009579b806644a95aa3bc68fb7cbc4d89da1"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=google/gemma-4-31B-it&signing_algo=ed25519&nonce=991c2e4d5fa0c185776286b4be07009579b806644a95aa3bc68fb7cbc4d89da1",
  "signing_public_key": "2ad96997ac5762e37f81b72c404c21f0d6baa53a9c6b8872113fb42716710b9b",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "09fc0bbd8a2dfe10b982adbf82e9046b9c483e64e7f48a083b5eb9ec1bbd8694",
    "parsed_evidence_digest": "d0b1f2b4086bd246393de6872b6dd02bee50fca67da72f0da567c9331584094e"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "zai-org/GLM-5.1-FP8",
  "status": "partial",
  "ts": "2026-07-16T12:04:17.228215150+00:00",
  "latency_ms": 5746,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "40ef1aadbb12f26cf4c2d499b9e7a7b043da4388200715abed573fa135a561bb65c800182cf2eb4e18c0a758375b7cd2567f7a800f26e96e91bcb51f17fb33cd",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "65c800182cf2eb4e18c0a758375b7cd2567f7a800f26e96e91bcb51f17fb33cd"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=zai-org/GLM-5.1-FP8&signing_algo=ed25519&nonce=65c800182cf2eb4e18c0a758375b7cd2567f7a800f26e96e91bcb51f17fb33cd",
  "signing_public_key": "40ef1aadbb12f26cf4c2d499b9e7a7b043da4388200715abed573fa135a561bb",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "118a0671a172cca8eda92c22d5c6154690b0cc856e008dc8c7740890075dbdca",
    "parsed_evidence_digest": "cecad11d1340121ce7a3e60c7649d1ac722b662bfc4cc0a0ebb050916ada437a"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "openai/gpt-oss-120b",
  "status": "partial",
  "ts": "2026-07-16T12:04:09.216559311+00:00",
  "latency_ms": 8011,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "21189bb96e2e0ff7598bd618bed473045cd6da886ddc844dc23f30bd2bfdb62d83c4aa20914af011058e600ad0b9723dd004a9357e45f08f5400883f117b458b",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "83c4aa20914af011058e600ad0b9723dd004a9357e45f08f5400883f117b458b"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=openai/gpt-oss-120b&signing_algo=ed25519&nonce=83c4aa20914af011058e600ad0b9723dd004a9357e45f08f5400883f117b458b",
  "signing_public_key": "21189bb96e2e0ff7598bd618bed473045cd6da886ddc844dc23f30bd2bfdb62d",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "de264c7782d01fcbaf8016716890bbfb4a68a67ca29efacfa1362b1463cadcb2",
    "parsed_evidence_digest": "85ae296c27f19beacd289506f49b2911e97402d133376cdb5ccee3e2baa333da"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-qwen-3.5-122b",
  "label": "Qwen 3.5 122B (TEE)",
  "model": "Qwen/Qwen3.5-122B-A10B",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.783241772+00:00",
  "latency_ms": 11433,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "d0aa20bcf567cc0c7c914608967dbd4c7a17e10b600802d45923434ce323f8234011c24e9380b9e4ada1dee17adee142e21155165214896e4491cc82b8141c50",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "4011c24e9380b9e4ada1dee17adee142e21155165214896e4491cc82b8141c50"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.5-122B-A10B&signing_algo=ed25519&nonce=4011c24e9380b9e4ada1dee17adee142e21155165214896e4491cc82b8141c50",
  "signing_public_key": "d0aa20bcf567cc0c7c914608967dbd4c7a17e10b600802d45923434ce323f823",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7598215e3ad8c0b74fa1ba9f95f134f4689f01b0f2c7967635e9d44c7221ff91",
    "parsed_evidence_digest": "a2f90235157b494065167087bdf94df90942e9907dc6524369f03e90c7b09f0c"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-qwen-qwen3-6-27b-fp8",
  "label": "Qwen/Qwen3.6 27B FP8 (TEE)",
  "model": "Qwen/Qwen3.6-27B-FP8",
  "status": "partial",
  "ts": "2026-07-16T12:04:58.056237390+00:00",
  "latency_ms": 7880,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "052233b7fb537337f2f4f9c8a239297f8a5d8876b2ccce49dfa684bb53361c24d4b6745f159050e11d9602887270c994bc1d8a117d6332e59f6a050805300dbb",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d4b6745f159050e11d9602887270c994bc1d8a117d6332e59f6a050805300dbb"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.6-27B-FP8&signing_algo=ed25519&nonce=d4b6745f159050e11d9602887270c994bc1d8a117d6332e59f6a050805300dbb",
  "signing_public_key": "052233b7fb537337f2f4f9c8a239297f8a5d8876b2ccce49dfa684bb53361c24",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "9596eccc405f6b72d261d7b4329156a6a7cde8e29e633dd8afbf581e2bff5f09",
    "parsed_evidence_digest": "2f9087ff9e93f179a24d2c0e8eb89a39e15e4dded79cea3abb973a5adb3df532"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "Qwen/Qwen3-VL-30B-A3B-Instruct",
  "status": "partial",
  "ts": "2026-07-16T12:04:28.820682948+00:00",
  "latency_ms": 23276,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "31ddf80d420921b91ff4a41d933a15b46a3840e80031804c1c5ba4f25c4e88cc3d4a6be05966648abc4219c3319aa4bd961fd69a1c21cb908eacddd786aa9886",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "3d4a6be05966648abc4219c3319aa4bd961fd69a1c21cb908eacddd786aa9886"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3-VL-30B-A3B-Instruct&signing_algo=ed25519&nonce=3d4a6be05966648abc4219c3319aa4bd961fd69a1c21cb908eacddd786aa9886",
  "signing_public_key": "31ddf80d420921b91ff4a41d933a15b46a3840e80031804c1c5ba4f25c4e88cc",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "3641a8d7d30ca020154461e01012c5706e51a055406d5858119881ef158caf1c",
    "parsed_evidence_digest": "5829252be9c580109b7494706ad304b4ef8cde82570259f3ef015dc6bce6f12f"
  }
}

Target configuration was not retained.

{
  "provider": "near",
  "id": "near-qwen3.6-35b",
  "label": "Qwen3.6 35B (TEE)",
  "model": "Qwen/Qwen3.6-35B-A3B-FP8",
  "status": "partial",
  "ts": "2026-07-16T12:04:52.097629781+00:00",
  "latency_ms": 5958,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "aba45f0b8f90869baab26db02e8b01354bb8f8730769c60650cb7a635da602d43f41298aa9670e4ad1c5cfedda2715740bc8f0b51d09e34e48a4dad593a66063",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "3f41298aa9670e4ad1c5cfedda2715740bc8f0b51d09e34e48a4dad593a66063"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.6-35B-A3B-FP8&signing_algo=ed25519&nonce=3f41298aa9670e4ad1c5cfedda2715740bc8f0b51d09e34e48a4dad593a66063",
  "signing_public_key": "aba45f0b8f90869baab26db02e8b01354bb8f8730769c60650cb7a635da602d4",
  "signing_algo": "ed25519",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ed25519",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0ecf6512119786b365f5517969bc9ee073cb4e3b00e2c30020464f49157b38c2",
    "parsed_evidence_digest": "e550b8d5b372b5c1a022abf3adf2101498baa688945816531333c28a8f687cb9"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "model": "private/gemma4-31b",
  "status": "partial",
  "ts": "2026-07-16T12:04:14.948039765+00:00",
  "latency_ms": 5264,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "1411760c573593161a23f75f6be22d8910958b53cc17867963ade74b7d02b3aca080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "gemma4-31b-1.inf10.tinfoil.sh",
  "backend_tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-gemma4-31b",
  "backend_sigstore_tag": "v0.0.18",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85",
  "backend_images_verified": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b",
  "signing_public_key": "a080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
  "signing_algo": "hpke",
  "trust_tier": "tee-only",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "acf306b477fc284e3f62c7bb43a10196639cc2f77c5c5912c59b85ae1a1afed9",
    "parsed_evidence_digest": "d7bb081e77c6727edbb0999b21b00c84f9f5e933cba78382550f6e42a94e88be"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "model": "private/glm-5-2",
  "status": "partial",
  "ts": "2026-07-16T12:04:12.956297729+00:00",
  "latency_ms": 1991,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "1411760c573593161a23f75f6be22d8910958b53cc17867963ade74b7d02b3aca080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
  "signing_public_key": "a080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
  "signing_algo": "hpke",
  "trust_tier": "tee-only",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "057e53d29b2a0c93814e3d1952064ce88f5037d3c6df62c1a4a4dee4a8c6be49",
    "parsed_evidence_digest": "a68096d21bd4fdea0ad3ec8798e29912ffd4bea1c67c08d204c53b6d258886b9"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "private/gpt-oss-120b",
  "status": "partial",
  "ts": "2026-07-16T12:03:57.783781545+00:00",
  "latency_ms": 8415,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "gpt-oss-120b-1.inf10.tinfoil.sh",
  "backend_tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b",
    "rtmr0": "54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-gpt-oss-120b",
  "backend_sigstore_tag": "v0.0.26",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972",
  "backend_images_verified": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b",
  "signing_public_key": "48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
  "signing_algo": "hpke",
  "trust_tier": "tee-only",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "d2a179163d2a032cd27af72eab064e0688f49b6a7cb256fb629894ead40a4beb",
    "parsed_evidence_digest": "f849d6077aa54a8a9c400777c0d41604278db187a2ada201b1f92aac78372aa6"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "model": "private/kimi-k2-6",
  "status": "unreachable",
  "ts": "2026-07-16T12:04:20.212160056+00:00",
  "latency_ms": 2264,
  "error": "Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "342133ccad6f32f4dcb44c1c4039010455279b2325e2009b9cd9c83e3c8a5bcf",
    "parsed_evidence_digest": "4da86b91172e167f44b1fb837703c7af5bad05ca6c335b1e2110363edf4ae7b8"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "private/llama3-3-70b",
  "status": "partial",
  "ts": "2026-07-16T12:04:06.199724934+00:00",
  "latency_ms": 4437,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
  "backend_snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "74473fb5cc94902cbc4b7e7cf8e713cadc28338a2e64f5c26906b0a899cf8a58"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-llama3-3-70b",
  "backend_sigstore_tag": "v0.0.25",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
  "backend_images_verified": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
  "signing_public_key": "48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
  "signing_algo": "hpke",
  "trust_tier": "tee-only",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f510ed2ebec5af86a6b14c34a8f0868312f08e5a720f678f40984cc1a7364d19",
    "parsed_evidence_digest": "3a9276426c49ee2e9fa98ad14c273aec2c03dbb2ad5bc5d51d36e141382a910e"
  }
}

Target configuration was not retained.

{
  "provider": "ppq",
  "id": "ppq-qwen3-vl",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "private/qwen3-vl-30b",
  "status": "unreachable",
  "ts": "2026-07-16T12:04:10.637165007+00:00",
  "latency_ms": 2319,
  "error": "Network error: Tinfoil attestation request to qwen3-vl-30b.inf10.tinfoil.sh: error sending request for url (https://qwen3-vl-30b.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f73df4b8c9516fde5ff06e193dad148cb1bd38e02b8eb486bc2c353d2446aa45",
    "parsed_evidence_digest": "24df8f93edc42e46c2f23658bf212f56f7902668436a95491c9920d30a89a1ae"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-gemma-4-31b",
  "label": "Gemma 4 31b",
  "model": "gemma-4-31b",
  "status": "verified",
  "ts": "2026-07-16T12:03:57.785762442+00:00",
  "latency_ms": 3277,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "cb8b987a40b67770220bb32d8131314bf5c398d422409da8d2050bf1bffc02c7",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-gemma-latest",
  "label": "Gemma Latest",
  "model": "gemma-latest",
  "status": "verified",
  "ts": "2026-07-16T12:04:01.062993202+00:00",
  "latency_ms": 219,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "846922c3aeccb1915b8da8b5e47c935da0b462fd6687c4660f9d6f8c0a0ca7f1",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "model": "gpt-oss-120b",
  "status": "verified",
  "ts": "2026-07-16T12:04:01.282132722+00:00",
  "latency_ms": 214,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "948ff8fce9fb3002e8afff109818357fa66a10e8ab04c0474b6f4045d2d5ec20",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "model": "gpt-oss-latest",
  "status": "verified",
  "ts": "2026-07-16T12:04:01.496998311+00:00",
  "latency_ms": 170,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "24c010dbed2abdc109d258401aa98a2af3ed29621ca376848abe504748f4e0eb",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-kimi-k2-6",
  "label": "Kimi K2.6",
  "model": "kimi-k2.6",
  "status": "verified",
  "ts": "2026-07-16T12:04:01.667098744+00:00",
  "latency_ms": 226,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "70db731864b20d8dff212169ee8c21ea98c1f5ab6d239e59f22a6ef4a0738e59",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "model": "qwen3-embedding-4b",
  "status": "verified",
  "ts": "2026-07-16T12:04:01.893692793+00:00",
  "latency_ms": 167,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "d62f15a67a852e8053de861e130ab3c5b154da7adc6c222c2b9fc52dcdb5bbf0",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "model": "voxtral-mini-3b",
  "status": "verified",
  "ts": "2026-07-16T12:04:02.061073782+00:00",
  "latency_ms": 174,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "72d21862c628e5c80a9c954e44a29629d9daae8463a12adeb087a121d32bc48b",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "verified",
  "ts": "2026-07-16T12:04:02.235954255+00:00",
  "latency_ms": 168,
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
    "quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "e2ee_capability": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Active Contrast manifest attested."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "c1ab819f402d1923647c9ced1db52215dddac654b766c3b61ae1c8f20461e104",
    "parsed_evidence_digest": "ba394ee7f36976db6e6baa48110fcc58a9b8069e97c6d1fc90df90b8265caeee"
  }
}

Target configuration was not retained.

{
  "provider": "redpill",
  "id": "redpill-phala-gemma-4-26b-a4b-uncensored",
  "label": "Phala/gemma 4 26b A4b Uncensored (TEE)",
  "model": "phala/gemma-4-26b-a4b-uncensored",
  "status": "failed",
  "ts": "2026-07-16T12:03:57.783169035+00:00",
  "latency_ms": 9997,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008b3e53eaafb1f253949ed0ce3394fe0f084489a2233b976cf89f0174ca30fda4",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.redpill.ai/v1/attestation/report?model=phala/gemma-4-26b-a4b-uncensored&nonce=8b3e53eaafb1f253949ed0ce3394fe0f084489a2233b976cf89f0174ca30fda4",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7ede7a2fa0034e1f2178140fdd4cf91bd63cfd74a5d183930c46d663222bf0eb",
    "parsed_evidence_digest": "954ecce6eeed20f6c13c58b2bb27b69a21dd9b50ba0cd39368fc665f36047f4d"
  }
}

Target configuration was not retained.

{
  "provider": "redpill",
  "id": "redpill-phala-qwen3-6-35b-a3b-uncensored",
  "label": "Phala/qwen3.6 35b A3b Uncensored (TEE)",
  "model": "phala/qwen3.6-35b-a3b-uncensored",
  "status": "failed",
  "ts": "2026-07-16T12:04:07.780240198+00:00",
  "latency_ms": 6655,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d4c6277f9ece1a0ac6c0a64dfb2fbd9b584853f258a5ccfc0e61bdfce64a7583",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.redpill.ai/v1/attestation/report?model=phala/qwen3.6-35b-a3b-uncensored&nonce=d4c6277f9ece1a0ac6c0a64dfb2fbd9b584853f258a5ccfc0e61bdfce64a7583",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e4a98d9f53a3521e784ca9056a63dc14b16911afa0f100dc3c264178e9725004",
    "parsed_evidence_digest": "a5bf8c6c37d3f69512568d3bde7a3a2297c86f380898dc5f8e951cb7b8391283"
  }
}

Target configuration was not retained.

{
  "provider": "redpill",
  "id": "redpill-phala-uncensored-24b",
  "label": "Phala/uncensored 24b (TEE)",
  "model": "phala/uncensored-24b",
  "status": "failed",
  "ts": "2026-07-16T12:04:14.435788749+00:00",
  "latency_ms": 6279,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001a419fefdbed41388b600cddfad7596025b62957f71479d1724c2ba2f62b676c",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.redpill.ai/v1/attestation/report?model=phala/uncensored-24b&nonce=1a419fefdbed41388b600cddfad7596025b62957f71479d1724c2ba2f62b676c",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "05f8fc66328556400a8c7e676aece3ffaf115395fa3e0c7d2b14c14103662075",
    "parsed_evidence_digest": "286e3b44175d25fbb88200324e2f61dd6515a0627196e708198c823a89a004b6"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-gemma4",
  "label": "Gemma 4 31B",
  "model": "gemma4-31b",
  "status": "verified",
  "ts": "2026-07-16T12:04:08.660814815+00:00",
  "latency_ms": 4077,
  "tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "images_verified": true,
  "tls_fingerprint": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a",
  "tls_matches": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.18",
  "release_digest": "c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85",
  "sigstore_repo": "tinfoilsh/confidential-gemma4-31b",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"
  ],
  "source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "hw-verified-tls",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "906bd0109e47bf04bf3f5a0779f1c6ef3b7eee324e573db7d563dd85ddaf01c2",
    "parsed_evidence_digest": "fccaa60b8752d4be7b80f1f2b844575795533345bac43218e44a37080f2743a3"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-120b",
  "label": "GPT-OSS 120B",
  "model": "gpt-oss-120b",
  "status": "verified",
  "ts": "2026-07-16T12:04:12.738588483+00:00",
  "latency_ms": 2920,
  "tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b",
    "rtmr0": "54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "images_verified": true,
  "tls_fingerprint": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b414",
  "tls_matches": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.26",
  "release_digest": "4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972",
  "sigstore_repo": "tinfoilsh/confidential-gpt-oss-120b",
  "config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "hw-verified-tls",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "c032a6ba524a832855a9a5ecb7cbb2ac10197ca24042d9225372e4431d6f6497",
    "parsed_evidence_digest": "be8fac9ca95ec4f043d31571e22a34cf3a9a1933d7f88e2f288f6a2eea8c9b4f"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-safeguard",
  "label": "GPT-OSS Safeguard 120B",
  "model": "gpt-oss-safeguard-120b",
  "status": "verified",
  "ts": "2026-07-16T12:04:15.659323058+00:00",
  "latency_ms": 3780,
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e6668665ddbf0541157ffb70e94f438ba3d34a6551112ee09e42393b9450cb031",
    "measurement": "f58e91177fe591d3e4a9d6fdd26e9173990123c0ec9be3d66076dfb9210834b337c0a08c4ce66a180306347012d4de43",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "74473fb5cc94902cbc4b7e7cf8e713cadc28338a2e64f5c26906b0a899cf8a58"
  },
  "images_verified": true,
  "tls_fingerprint": "8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e",
  "tls_matches": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.8",
  "release_digest": "7d7ecc9c5430e6f8324b30712d0d8346d04eff45a98e5b732de0f6160dfc7c0c",
  "sigstore_repo": "tinfoilsh/confidential-gpt-oss-safeguard-120b",
  "config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
  "trust_tier": "hw-verified-tls",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "d8efec7d9e1df7b3ff50a95e009dfa728b3a3953ad479e9e9131fbc74701d9e7",
    "parsed_evidence_digest": "961c1b4c888940f63c0599e49dd4cae25b63ddec5b021eb55fc45ce63de3706a"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-kimi-k2-6",
  "label": "Kimi K2.6",
  "model": "kimi-k2-6",
  "status": "unreachable",
  "ts": "2026-07-16T12:04:08.347129699+00:00",
  "latency_ms": 313,
  "error": "Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "fb670d094ee9bfed45d6299709f01fee2db6d7a2fc09796c74f5c07bb4693e58",
    "parsed_evidence_digest": "4da86b91172e167f44b1fb837703c7af5bad05ca6c335b1e2110363edf4ae7b8"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-llama",
  "label": "Llama 3.3 70B",
  "model": "llama3-3-70b",
  "status": "verified",
  "ts": "2026-07-16T12:04:04.286778336+00:00",
  "latency_ms": 4060,
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "74473fb5cc94902cbc4b7e7cf8e713cadc28338a2e64f5c26906b0a899cf8a58"
  },
  "images_verified": true,
  "tls_fingerprint": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde6884",
  "tls_matches": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.25",
  "release_digest": "8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
  "sigstore_repo": "tinfoilsh/confidential-llama3-3-70b",
  "config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
  "trust_tier": "hw-verified-tls",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "07e9ce03008eb04b2564fa9a2fdacb7ea19d546ab973edd6342911ea5af7dde8",
    "parsed_evidence_digest": "cb7274b913fdca1d73da3959f76a517e232e42b3d39d19456c13048ef73d3d9e"
  }
}

Target configuration was not retained.

{
  "provider": "tinfoil",
  "id": "tinfoil-router",
  "label": "Router",
  "status": "verified",
  "ts": "2026-07-16T12:03:57.781718232+00:00",
  "latency_ms": 6505,
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "74473fb5cc94902cbc4b7e7cf8e713cadc28338a2e64f5c26906b0a899cf8a58"
  },
  "images_verified": true,
  "tls_fingerprint": "3d47e93ba9cfa10f1eed509ae3717dbf965bb21645dd77ca4d57a51dccd22129",
  "tls_matches": false,
  "version": "v0.0.121",
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Direct attested workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "3f2ef2ce1085b789c452574fe69c64ea2fd4a455513cd0b551b79d6846d26c0b",
    "parsed_evidence_digest": "dcd23e05735217d3d8639fcec02c868dfc5cead68bc1925d3e73ecd44c7cfa40"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-16T12:05:14.199482810+00:00",
  "latency_ms": 9107,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c000000000000000000000000550832d60040dd8abbcf3c54aa61d8eed5bb1f29acac52e0d64f4ceb3f3f7151",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "550832d60040dd8abbcf3c54aa61d8eed5bb1f29acac52e0d64f4ceb3f3f7151"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=550832d60040dd8abbcf3c54aa61d8eed5bb1f29acac52e0d64f4ceb3f3f7151",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e2b374aa3b10a76736c0bfcca2dce5286499928e74d11108ec26fc76a8071ee7",
    "parsed_evidence_digest": "a58066636f68cb2d75ac45f1e78b7c7a41afe02073e2bdcbcab28c5305c5634f"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:23.307168731+00:00",
  "latency_ms": 3544,
  "error": "Nonce mismatch (possible replay): expected a38d3a7bd3ef075463ccc3d142b6966f2a8fddae728195b9423baca78e771fba, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "191a0df75a50ac0ec75c40bff87caefb097f89dca0655ff186d152977ca7da8f",
    "parsed_evidence_digest": "41e9453dfd47992d2e5c82ef8ee1fc7628f1d384b0700ddaf4ae7fa027825f43"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:26.852050084+00:00",
  "latency_ms": 6761,
  "error": "Nonce mismatch (possible replay): expected 87b13bd205db7eb1bcd9ea4e80e9030bcf694e15c38b25f315f935f475d5a62e, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "c3b0080a6995b7ee8c657b50089aaf9a2e480725300e821ae03b2ac059ef09ca",
    "parsed_evidence_digest": "7bb784883f1fd7b66529e943fb840c3ecad2f57502ab8f5a865a4b9ce449e201"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-07-16T12:05:33.613610952+00:00",
  "latency_ms": 9096,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d00000000000000000000000031abd275d6638421f03ea03fd0dc873cb0f5edc90ddd1cae3c2bda4b70f745b2",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "31abd275d6638421f03ea03fd0dc873cb0f5edc90ddd1cae3c2bda4b70f745b2"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=31abd275d6638421f03ea03fd0dc873cb0f5edc90ddd1cae3c2bda4b70f745b2",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a2516ad3bd40eb891e2276498f94e77e60ef1e89e79d7f7f2d201a19b6b5f761",
    "parsed_evidence_digest": "ed06f26c9cdfae203cb389022ccf1850269de795f5ec0a6d8d3220248833f8cc"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:42.710421774+00:00",
  "latency_ms": 3659,
  "error": "Nonce mismatch (possible replay): expected 022db339f84c9139cf86ae3ca19b9970204cdc4091e936d7a5c245eaa464dc7e, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7e5cfd079fbe78d478ff829888e25f2e6efda97b354d6beb57c1a47fb64e0c76",
    "parsed_evidence_digest": "98e25e73135772c1ff4ca3424bd4706d36af3742748dc04bb9a55d1802167fe6"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:46.369706049+00:00",
  "latency_ms": 6307,
  "error": "Nonce mismatch (possible replay): expected 39308d0f373458cc546d4aef74ab225c5c3ee5ad3e4f80aa48670075170ae3d8, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "fa8f39eff56f8c0c331c11c3458158210554b93409cc3e2022b1712c893e73cf",
    "parsed_evidence_digest": "458de813c40fc681fa0715b4a965d489c7364d12eb824301034bf72a70c3a660"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:00.997121440+00:00",
  "latency_ms": 6777,
  "error": "Nonce mismatch (possible replay): expected 4c13553ddc961001ba1692261e8771d3badb096ea975029b33a4f0df5b19f0be, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "76b88445e44cd13d8c6e2c2e71533185c276abf0792fad409bb6de6fc463cfc9",
    "parsed_evidence_digest": "882def9e33b00ce9fe6052febef83154b0987eb077514ff15dcd3210c78c41bf"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-07-16T12:04:12.647883465+00:00",
  "latency_ms": 10461,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000195d7ce239873f54929bbc4d31d1278ee4545ad1275184fe486fdfece3e82dca",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "195d7ce239873f54929bbc4d31d1278ee4545ad1275184fe486fdfece3e82dca"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=195d7ce239873f54929bbc4d31d1278ee4545ad1275184fe486fdfece3e82dca",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7e24c36e16e87a53254da9ed3beb7a7bcfc83cdf4208ca7ee4a59d591b6414f1",
    "parsed_evidence_digest": "f1d3041bd46fe98f1a46abe066cf7e1cf4ca3745ee3ca632afd97504b06ec096"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "failed",
  "ts": "2026-07-16T12:05:07.774385767+00:00",
  "latency_ms": 6425,
  "error": "Nonce mismatch (possible replay): expected 045d210613d79583462be6e8e1fd4963c5135a61b2ddeba9fd6e80b4d621e0ff, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e8dff96a97af11d9b3a0153d9021465ba567614a9b2b224309ab1a64c18a6f04",
    "parsed_evidence_digest": "983125df6629dca2d4a686895f158697edf01a263c5e0d95c71996dc04f89d32"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-07-16T12:03:59.860418135+00:00",
  "latency_ms": 9213,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e333000000000000000000000000c7698bad68afbf3f4197f20a5828750c6c51b512aecef6c543dfb1cb3404723b",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c7698bad68afbf3f4197f20a5828750c6c51b512aecef6c543dfb1cb3404723b"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=c7698bad68afbf3f4197f20a5828750c6c51b512aecef6c543dfb1cb3404723b",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "db2006ceb2d74acfcf35c4a762daee289364a827f002482557f5d99986c009c6",
    "parsed_evidence_digest": "a86a18d72f04f4a4d19cb57d348ab528bb7569e00d0c463a1864c49087337e8a"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-07-16T12:03:57.782630504+00:00",
  "latency_ms": 2077,
  "error": "Nonce mismatch (possible replay): expected 106901e034e718103ec003e79ef0ff1cc55d975110f6e5e941da18f01fb2edbb, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f503bd553f1fb2a508d3924d9f6e57613dc4b8c86cfd7ef52e40897a7b015585",
    "parsed_evidence_digest": "60ddc30bdae9cb78b850d919f68b9a3678c57eecb8b4d7980236820c8dd470c8"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-07-16T12:04:23.109593385+00:00",
  "latency_ms": 2240,
  "error": "Nonce mismatch (possible replay): expected 1ebe2f8435fbc4bd2e5718a35f43b0704ae8488d5d251b24e9b72b4e8f8f0c51, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "af69bedf0a1657ad32b9e2897076293e50396e68658999e3ccb1c1ff0f5e02ae",
    "parsed_evidence_digest": "c620007d49ed865428e06f017c838e3803eebfa9da34e1bef034014eb7517e0a"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-07-16T12:04:25.350374920+00:00",
  "latency_ms": 6307,
  "error": "Nonce mismatch (possible replay): expected d058e1ec40344277c55b015bdf233d94a52771235256165b225d0166f4bf372b, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "5a9dfed0ca00e97927eb6ceeb1e1cc1c754299bec5b933c0df117345b3b2b951",
    "parsed_evidence_digest": "ddce4271af866d24f321f4d765a1b34cc835396ccd54742487efa06cbf75a6f0"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-16T12:04:09.073712112+00:00",
  "latency_ms": 3574,
  "error": "Nonce mismatch (possible replay): expected cc8f839b22d82ab736151dc963edd3f8070435b9bc4d80dc625b7e2a19318119, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "38c040b71b3a2289f0ce6ad907f25e44203b16627c76229c1bacb96a609e8572",
    "parsed_evidence_digest": "c31e9c9f6f50e7cb6461c26ef673481438dc3d2c3c0329bdab60924177c147f8"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-16T12:04:31.658007306+00:00",
  "latency_ms": 25907,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da000000000000000000000000b8cc52e35f2c7f75628b6c74c4afebd6721bbf8ac746c0910f518b15789ce521",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b8cc52e35f2c7f75628b6c74c4afebd6721bbf8ac746c0910f518b15789ce521"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=b8cc52e35f2c7f75628b6c74c4afebd6721bbf8ac746c0910f518b15789ce521",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "31b5becf3f2ce5c9d88925999ebfb94c54dc5f75d0f0edc5795d408fc16ce4a6",
    "parsed_evidence_digest": "14c8716aad40b48535d627f475669a2900cce704b62f177c78f2f9e68bcc795e"
  }
}

Target configuration was not retained.

{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-16T12:04:57.565918067+00:00",
  "latency_ms": 3431,
  "error": "Nonce mismatch (possible replay): expected 1dec1966122f62740339820819f00b0f198e46b4fe2e43937df08f9492ebd1a4, got missing Venice response nonce",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "6e5a30fed7383f62cac313042057282b78065657d0dff4545fe9dc380eba960a",
    "parsed_evidence_digest": "ec87a83fa87a0fad6136a80fc776701cb3544c775a3da4487d2b767a9bda0fdc"
  }
}