Stored Run Record

Run #802

Completed Jul 16, 2026, 12:29:36 UTC UTC

Parsed result only

This legacy run predates reconstruction-grade storage. Its parsed check result is retained, but exact policy, target configuration, and raw inputs may be unavailable.

Total checks
16
Verified
0
Incomplete
5
Failed
11
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-16T12:28:58.028720992+00:00",
  "latency_ms": 8306,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c0000000000000000000000002929d0e9ba937bc329597577929cb6e09e39c3fed5a7e95424564e5657f531a4",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "2929d0e9ba937bc329597577929cb6e09e39c3fed5a7e95424564e5657f531a4"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=2929d0e9ba937bc329597577929cb6e09e39c3fed5a7e95424564e5657f531a4",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e2b374aa3b10a76736c0bfcca2dce5286499928e74d11108ec26fc76a8071ee7",
    "parsed_evidence_digest": "ce489dd2625d441235ad0b8df0cfc8a27bf9cded984cf20fb867f162fc12d61d"
  }
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-16T12:29:06.335496608+00:00",
  "latency_ms": 4568,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000fefe2effef374e6adb9343d7bdedb177115c3f215736d32d03fcaf73a7dee03b",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "fefe2effef374e6adb9343d7bdedb177115c3f215736d32d03fcaf73a7dee03b"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=fefe2effef374e6adb9343d7bdedb177115c3f215736d32d03fcaf73a7dee03b",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "191a0df75a50ac0ec75c40bff87caefb097f89dca0655ff186d152977ca7da8f",
    "parsed_evidence_digest": "091401a2cecacc35c6b50d73695438475e4b6532ac2cd0853f91540a29a976f9"
  }
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-07-16T12:29:10.903910684+00:00",
  "latency_ms": 7056,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000e95fa6ca618ea661e4154b8e29023abe793ec03d668901676ac3b19ef016bfa6",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "e95fa6ca618ea661e4154b8e29023abe793ec03d668901676ac3b19ef016bfa6"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=e95fa6ca618ea661e4154b8e29023abe793ec03d668901676ac3b19ef016bfa6",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "c3b0080a6995b7ee8c657b50089aaf9a2e480725300e821ae03b2ac059ef09ca",
    "parsed_evidence_digest": "8e7b8f132109ace0c3669e76a863e342c82b4b41a452e701bccce28acf63cc04"
  }
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-07-16T12:29:17.960764829+00:00",
  "latency_ms": 7196,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d0000000000000000000000009493ebfca8996c7601c4f30bbf0e0f123e0b6969d22937647dcd888cb6132759",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "9493ebfca8996c7601c4f30bbf0e0f123e0b6969d22937647dcd888cb6132759"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=9493ebfca8996c7601c4f30bbf0e0f123e0b6969d22937647dcd888cb6132759",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a2516ad3bd40eb891e2276498f94e77e60ef1e89e79d7f7f2d201a19b6b5f761",
    "parsed_evidence_digest": "a95de8e0917f4cdcc64657f3af1bcda06960b27234c9874b586a8d95998207f8"
  }
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-16T12:29:25.157205471+00:00",
  "latency_ms": 5144,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006c7e8b6d026e9d64f695c9719da6c20fb77bcd363081cf75cfe691dad40a0542",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "6c7e8b6d026e9d64f695c9719da6c20fb77bcd363081cf75cfe691dad40a0542"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=6c7e8b6d026e9d64f695c9719da6c20fb77bcd363081cf75cfe691dad40a0542",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7e5cfd079fbe78d478ff829888e25f2e6efda97b354d6beb57c1a47fb64e0c76",
    "parsed_evidence_digest": "ec7c65067934c5bcc807061d4fa3f1cbe8c7c63b7ed8b2c25014988f5aa0bf1b"
  }
}

Venice.ai

e2ee-venice-uncensored-24b-p

E2ee Venice Uncensored 24b P (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "failed",
  "ts": "2026-07-16T12:29:30.302070831+00:00",
  "latency_ms": 6569,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000255d1b777b5b6d44d2ebb32d291e4c3b94835069c3eeedd12a25a1745ed6ccf7",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "255d1b777b5b6d44d2ebb32d291e4c3b94835069c3eeedd12a25a1745ed6ccf7"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=255d1b777b5b6d44d2ebb32d291e4c3b94835069c3eeedd12a25a1745ed6ccf7",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/uncensored-24b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "fa8f39eff56f8c0c331c11c3458158210554b93409cc3e2022b1712c893e73cf",
    "parsed_evidence_digest": "4d0612ada1fbdb5198e741353fd42f78e985d4c390f7bb77ec5ccf282f04c59c"
  }
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:45.478358560+00:00",
  "latency_ms": 5881,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000057d792e0d9f66788eae7bb96f2eddcf1ca47ebba44e0b86107a32a581bedb0fd",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "57d792e0d9f66788eae7bb96f2eddcf1ca47ebba44e0b86107a32a581bedb0fd"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=57d792e0d9f66788eae7bb96f2eddcf1ca47ebba44e0b86107a32a581bedb0fd",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "76b88445e44cd13d8c6e2c2e71533185c276abf0792fad409bb6de6fc463cfc9",
    "parsed_evidence_digest": "1dfc36d03dec72cd94b405ae4eab37d4572b993d68390516797461f7ef4cb439"
  }
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-07-16T12:28:13.125825132+00:00",
  "latency_ms": 8351,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000a5624163c501f2eaa70d7c06cb674c38bd2ae7f25873294f27ab692646e34b27",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "a5624163c501f2eaa70d7c06cb674c38bd2ae7f25873294f27ab692646e34b27"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.309",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=a5624163c501f2eaa70d7c06cb674c38bd2ae7f25873294f27ab692646e34b27",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "7e24c36e16e87a53254da9ed3beb7a7bcfc83cdf4208ca7ee4a59d591b6414f1",
    "parsed_evidence_digest": "3090a930b22a79ca16042814ca19d91275d0edf9e7a9312031401232387e02dc"
  }
}

Venice.ai

e2ee-glm-4-7-p

GLM 4.7 (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:51.359443600+00:00",
  "latency_ms": 6669,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004c29961eb5fab74d924a6a3c74eedb8e5c3597bb9b76a86f834cf3a1a3bfa9d5",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "4c29961eb5fab74d924a6a3c74eedb8e5c3597bb9b76a86f834cf3a1a3bfa9d5"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=4c29961eb5fab74d924a6a3c74eedb8e5c3597bb9b76a86f834cf3a1a3bfa9d5",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-4.7"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e8dff96a97af11d9b3a0153d9021465ba567614a9b2b224309ab1a64c18a6f04",
    "parsed_evidence_digest": "a93dfbba41f39e43e275c46bb987469408cfa20011ebcf99373c4503dac4e8ab"
  }
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-07-16T12:28:01.672252959+00:00",
  "latency_ms": 6234,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e33300000000000000000000000094d5dbb4849ef0d50f606fc1ded07fd40b89ad6b8cdd767b3a1bce9b50c8b8f3",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "94d5dbb4849ef0d50f606fc1ded07fd40b89ad6b8cdd767b3a1bce9b50c8b8f3"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=94d5dbb4849ef0d50f606fc1ded07fd40b89ad6b8cdd767b3a1bce9b50c8b8f3",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "db2006ceb2d74acfcf35c4a762daee289364a827f002482557f5d99986c009c6",
    "parsed_evidence_digest": "200abc97bd2824bcfe2afc10436d3ca62c3628af2d72cdbacc7d630010da07e9"
  }
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-07-16T12:27:55.774852264+00:00",
  "latency_ms": 5897,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006d1b75d75e6dfc32d300b0d5251d57393ddde55b18c71a7fbf1519ac5307e0a0",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "6d1b75d75e6dfc32d300b0d5251d57393ddde55b18c71a7fbf1519ac5307e0a0"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=6d1b75d75e6dfc32d300b0d5251d57393ddde55b18c71a7fbf1519ac5307e0a0",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f503bd553f1fb2a508d3924d9f6e57613dc4b8c86cfd7ef52e40897a7b015585",
    "parsed_evidence_digest": "bad3e06328693629ab0040aafa21ffbeca001bb7fa6266cc345f82c13352ddf9"
  }
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:21.477075720+00:00",
  "latency_ms": 3426,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000839b6e55c38890287387f9a9cf466cf6d02cde15f3327bc15448c0f507e05347",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "839b6e55c38890287387f9a9cf466cf6d02cde15f3327bc15448c0f507e05347"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=839b6e55c38890287387f9a9cf466cf6d02cde15f3327bc15448c0f507e05347",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "af69bedf0a1657ad32b9e2897076293e50396e68658999e3ccb1c1ff0f5e02ae",
    "parsed_evidence_digest": "aed96c878d86c740a1c9c05c1a8d648070e3596bd785e2ea8221daf43f882a68"
  }
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:24.904029900+00:00",
  "latency_ms": 6420,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000772601151cd6c938861df0a8a0325f485c5ec63262568341cb282704ec0dd7ac",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "772601151cd6c938861df0a8a0325f485c5ec63262568341cb282704ec0dd7ac"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=772601151cd6c938861df0a8a0325f485c5ec63262568341cb282704ec0dd7ac",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "5a9dfed0ca00e97927eb6ceeb1e1cc1c754299bec5b933c0df117345b3b2b951",
    "parsed_evidence_digest": "5975af8c14818ce95a2645e147e15291e48ff826a66e38bf416c29fd17e6f016"
  }
}

Venice.ai

e2ee-qwen3-30b-a3b-p

Qwen3 30B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:07.906466214+00:00",
  "latency_ms": 5219,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000506d010f33e6eef3af44405a3a1d29312c7936c8bcd676affb0620f45b7c35ac",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "506d010f33e6eef3af44405a3a1d29312c7936c8bcd676affb0620f45b7c35ac"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=506d010f33e6eef3af44405a3a1d29312c7936c8bcd676affb0620f45b7c35ac",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-30b-a3b-instruct-2507"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "38c040b71b3a2289f0ce6ad907f25e44203b16627c76229c1bacb96a609e8572",
    "parsed_evidence_digest": "59a1e525822f952ec891ce3e3fef644f36f3899fce2d1f960e9f307b9af3e850"
  }
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-16T12:28:31.324876751+00:00",
  "latency_ms": 8219,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da00000000000000000000000095e1940e4535780cbdaf3bae22e8dde1d2a69fb4ee439408977a2f45a27a175b",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "95e1940e4535780cbdaf3bae22e8dde1d2a69fb4ee439408977a2f45a27a175b"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=95e1940e4535780cbdaf3bae22e8dde1d2a69fb4ee439408977a2f45a27a175b",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "31b5becf3f2ce5c9d88925999ebfb94c54dc5f75d0f0edc5795d408fc16ce4a6",
    "parsed_evidence_digest": "cf488e48f82485abac3ddefae13b395e49487e78030d7f59556fc48feb71bfda"
  }
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-16T12:28:39.544671918+00:00",
  "latency_ms": 5933,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000002fca9bf814f2c0a3688be673b55490c99b73d241978b0ce29817cd1d7a52b978",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "2fca9bf814f2c0a3688be673b55490c99b73d241978b0ce29817cd1d7a52b978"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=2fca9bf814f2c0a3688be673b55490c99b73d241978b0ce29817cd1d7a52b978",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "6e5a30fed7383f62cac313042057282b78065657d0dff4545fe9dc380eba960a",
    "parsed_evidence_digest": "b9b72d22550be3efd2b8e26ccc09f2646dd4504d38e0541cf64e592b17cf439a"
  }
}