Stored Run Record

Run #806

Completed Jul 16, 2026, 12:59:32 UTC UTC

Parsed result only

This legacy run predates reconstruction-grade storage. Its parsed check result is retained, but exact policy, target configuration, and raw inputs may be unavailable.

Total checks
29
Verified
0
Incomplete
23
Failed
6
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

NanoGPT

TEE/deepseek-v3.2

DeepSeek V3.2 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-deepseek-v3.2",
  "label": "DeepSeek V3.2 (TEE)",
  "model": "TEE/deepseek-v3.2",
  "status": "partial",
  "ts": "2026-07-16T12:58:12.749951977+00:00",
  "latency_ms": 1278,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006a6eafdfcc6fa9ffa16b1579ec096c7d0b9f62fd304b2d504184aaa4b1ce10d4",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.2&nonce=6a6eafdfcc6fa9ffa16b1579ec096c7d0b9f62fd304b2d504184aaa4b1ce10d4",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v3.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "cd7f4cd83e32e3715c4968413e7153ea88c5878d62af09c54167c2e96599c536",
    "parsed_evidence_digest": "f90ae255b9dad7f29814ea805c1d8ef1b03fbf144f9a3f585df583d2948f4ab2"
  }
}

NanoGPT

TEE/gemma4-31b

Gemma 4 31B (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "TEE/gemma4-31b",
  "status": "partial",
  "ts": "2026-07-16T12:57:57.739421686+00:00",
  "latency_ms": 1611,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07030600000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "ce689670f86508a26ec8d679bc52ac362ec5ad14795e6d8d817fa12def21fb300e5931337b62da3a759e046bce4b6716320c3f9ce20f808f6640ac72a456a27a",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/gemma4-31b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "dafc1e915f589dbdb0ea448c0c9c96070b5b5834019f45f595d26be64f8f4ea8",
    "parsed_evidence_digest": "9a035a567923638d103d9fc6a749ffaf6c6afdb928bcebbdfe0b735c206103f9"
  }
}

NanoGPT

TEE/glm-5.1

GLM 5.1 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "TEE/glm-5.1",
  "status": "partial",
  "ts": "2026-07-16T12:57:59.350789503+00:00",
  "latency_ms": 3361,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a90fd3dcf2e78f9cc6cf02fb66cca6dff8e984d0cf0d5928590fc166325d2f2b",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "a90fd3dcf2e78f9cc6cf02fb66cca6dff8e984d0cf0d5928590fc166325d2f2b"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1&nonce=a90fd3dcf2e78f9cc6cf02fb66cca6dff8e984d0cf0d5928590fc166325d2f2b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.1"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "b067e40884a3ac9f74277deb22536929798c34f55129750cbe807bb5b351c1f4",
    "parsed_evidence_digest": "3bbd4b930543f68eb84e11e3105bc909b136ff7de29bef26b502d507729291c9"
  }
}

NanoGPT

TEE/gpt-oss-120b

GPT-OSS 120B (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "TEE/gpt-oss-120b",
  "status": "partial",
  "ts": "2026-07-16T12:57:55.664367379+00:00",
  "latency_ms": 2075,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a080c295127500fb78a707e10d62c5bfb75436f675bf99b572d2dc3313f5f730",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-120b&nonce=a080c295127500fb78a707e10d62c5bfb75436f675bf99b572d2dc3313f5f730",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "fcb028798628584e45b783a356839253a060d185930916a3445e2d473d0a1dd7",
    "parsed_evidence_digest": "b79207b7b2253663dc8db0b87ccd0c8934ea538220086879feedde9c3c4ad8bb"
  }
}

NanoGPT

TEE/kimi-k2.6

Kimi K2.6 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "model": "TEE/kimi-k2.6",
  "status": "partial",
  "ts": "2026-07-16T12:58:02.712022489+00:00",
  "latency_ms": 1354,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000764989c5427c8c557da840b18e1da57f47d5228d74255da85cdb7737a13443eb",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.6&nonce=764989c5427c8c557da840b18e1da57f47d5228d74255da85cdb7737a13443eb",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/kimi-k2.6"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "bdfbbabeb5f736ddb6481e58bf3ce03bc771262935bce71d74c87432f448beb0",
    "parsed_evidence_digest": "07bf9383b949a189e724d16e4b9c1f3888bf92b2894028d6274ea2c702d719b0"
  }
}

NanoGPT

TEE/llama3-3-70b

Llama 3.3 70B (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "TEE/llama3-3-70b",
  "status": "partial",
  "ts": "2026-07-16T12:57:53.548508720+00:00",
  "latency_ms": 2115,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "94361d7201a8476779764f6f7a8bf24cf53832e4cd4b962586b500198e3d8829"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fllama3-3-70b",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/llama3-3-70b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a227546dd52bb67b54532ca7074de4ea5346958d4275957f268cb86e95edb7d3",
    "parsed_evidence_digest": "0cee8a098c4f2b1bfe663442422940bf52be3fbd74be0e938fdbcc2554b8cd74"
  }
}

NanoGPT

TEE/qwen3.5-397b-a17b

Qwen3.5 397B (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-qwen3.5-397b",
  "label": "Qwen3.5 397B (TEE)",
  "model": "TEE/qwen3.5-397b-a17b",
  "status": "failed",
  "ts": "2026-07-16T12:58:04.066200836+00:00",
  "latency_ms": 8683,
  "error": "Nonce mismatch (possible replay): expected b38647668e1ead4744b3b3116efa728f652d62d99244495592d7a096dc3d55fa, got 1585d44bd2923b6b90f3764b2118492c91a59be46689717e128c763186b3de66",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "656469b1d08ed8fb3fed7417c3e3fb5a8895efae74c9a0196e1e215d85213116",
    "parsed_evidence_digest": "2ef75386bf5b7b4dfab786c4f0e6761af083dba60685161abea6f0b7fdb3675d"
  }
}

NanoGPT

TEE/deepseek-v3.1

TEE/deepseek V3.1 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-deepseek-v3-1",
  "label": "TEE/deepseek V3.1 (TEE)",
  "model": "TEE/deepseek-v3.1",
  "status": "partial",
  "ts": "2026-07-16T12:58:14.028321763+00:00",
  "latency_ms": 2284,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000004093b90d36af56635a63c7b1d7525ceec00f125cdacdd7863d74778e47f5d51",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.1&nonce=04093b90d36af56635a63c7b1d7525ceec00f125cdacdd7863d74778e47f5d51",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v3.1"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "3532db4bf9f480dbdff716dba87bbb3913dd7c3b73a2389c993473631c728090",
    "parsed_evidence_digest": "6ed9a61bd3c73066554db47787445a3ff028d80814422c0f008bce97f8e466ac"
  }
}

NanoGPT

TEE/deepseek-v4-flash

TEE/deepseek V4 Flash (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-deepseek-v4-flash",
  "label": "TEE/deepseek V4 Flash (TEE)",
  "model": "TEE/deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-16T12:58:16.312683694+00:00",
  "latency_ms": 1363,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000087656d42d90aa8f2d505ebda916be11f6942768bcaceb5f21f1a6b986e94ddac",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v4-flash&nonce=87656d42d90aa8f2d505ebda916be11f6942768bcaceb5f21f1a6b986e94ddac",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/deepseek-v4-flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f62c84b53e79bf950d328ca361ae74e5b7d0cb811fb5f1c638bcf593ec6da71b",
    "parsed_evidence_digest": "debd4bb586db04e656889fc8c55b43c2f3776561916b66259323ab85376c08ce"
  }
}

NanoGPT

TEE/gemma-3-27b-it

TEE/gemma 3 27b It (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-3-27b-it",
  "label": "TEE/gemma 3 27b It (TEE)",
  "model": "TEE/gemma-3-27b-it",
  "status": "partial",
  "ts": "2026-07-16T12:58:17.676388609+00:00",
  "latency_ms": 1394,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000465c5b56f724a6f13c35319a9db1a3010862fdcdbfeffc5864192cc6400fc5cf",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-3-27b-it&nonce=465c5b56f724a6f13c35319a9db1a3010862fdcdbfeffc5864192cc6400fc5cf",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "2f14050215dfc8edb5fc522fc7996b563f09f671386a388a12baa5efdbfcdc87",
    "parsed_evidence_digest": "028d23b82977eb5479ff74c12036a86276107c9cdc76be14dca551726a1f1aa0"
  }
}

NanoGPT

TEE/gemma-4-26b-a4b-uncensored

TEE/gemma 4 26b A4b Uncensored (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-4-26b-a4b-uncensored",
  "label": "TEE/gemma 4 26b A4b Uncensored (TEE)",
  "model": "TEE/gemma-4-26b-a4b-uncensored",
  "status": "partial",
  "ts": "2026-07-16T12:58:19.070489285+00:00",
  "latency_ms": 2668,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000c1ba6fcb15d4c09a90aeba7813070677991d869f1bb1590a1b8d78fc9f6dd466",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c1ba6fcb15d4c09a90aeba7813070677991d869f1bb1590a1b8d78fc9f6dd466"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-26b-a4b-uncensored&nonce=c1ba6fcb15d4c09a90aeba7813070677991d869f1bb1590a1b8d78fc9f6dd466",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "e48a1d4b4f00b371f4faa292befb0d2cb42adeadd3bd12588b5b1748afe39b75",
    "parsed_evidence_digest": "526775f9b8241cdca5b908bcb9cbe00f20aec362b77baf3a8ada75f7079b701e"
  }
}

NanoGPT

TEE/gemma-4-31b-it

TEE/gemma 4 31b It (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma-4-31b-it",
  "label": "TEE/gemma 4 31b It (TEE)",
  "model": "TEE/gemma-4-31b-it",
  "status": "partial",
  "ts": "2026-07-16T12:58:21.739031655+00:00",
  "latency_ms": 1339,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000dd074ce0d32d75af0558f531898801254de68b710c0e03cfcd7e8bc84bc8f920",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-31b-it&nonce=dd074ce0d32d75af0558f531898801254de68b710c0e03cfcd7e8bc84bc8f920",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gemma-4-31b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "36310e994e0dc12660ebe49dc9a902f8a858dfe9f029fa46f238ba4c95d70d45",
    "parsed_evidence_digest": "1e0cbf9791209a0201887fb1a5af09bab546a0c68f578aacc52d14e1624799ad"
  }
}

NanoGPT

TEE/gemma4-31b:thinking

TEE/gemma4 31b:thinking (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gemma4-31b-thinking",
  "label": "TEE/gemma4 31b:thinking (TEE)",
  "model": "TEE/gemma4-31b:thinking",
  "status": "partial",
  "ts": "2026-07-16T12:58:23.078454062+00:00",
  "latency_ms": 2136,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07030600000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "b73f27085c4f7fa0f0c2ba10807892ddaa855d7f5d4aba4555efde63b5542dee6112a74212ddd4f0ce202c17492c9c492b65ede64c629e1c5705d414b6c12113",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b%3Athinking",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format; the request route is not bound."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "inferred",
      "evidence": "The upstream evidence matches the Tinfoil attestation format."
    },
    "upstream_model": "TEE/gemma4-31b:thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "ca1449c38f11150cef44a4716e506bfcd838ce5e02121dbd8117a696d4e2acc0",
    "parsed_evidence_digest": "b3f1cefed912b572c119dcb522720ff0f9cdf5000bbcce8488fbaa0d967d3265"
  }
}

NanoGPT

TEE/glm-4.7

TEE/glm 4.7 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-4-7",
  "label": "TEE/glm 4.7 (TEE)",
  "model": "TEE/glm-4.7",
  "status": "partial",
  "ts": "2026-07-16T12:58:25.214794847+00:00",
  "latency_ms": 3739,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000623d58774f3696ce33a703e081dd010400186f21df3fc7bbdc5008d2823ca9f9",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "623d58774f3696ce33a703e081dd010400186f21df3fc7bbdc5008d2823ca9f9"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-4.7&nonce=623d58774f3696ce33a703e081dd010400186f21df3fc7bbdc5008d2823ca9f9",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-4.7"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a6f1ab3963de81dadf7300aac1133c09c0b9df799ad50aae9f701f425df15c32",
    "parsed_evidence_digest": "5572c84c82f9cfb3ab992087c566eb099c79d239de068f10ac341db1e64a4cb2"
  }
}

NanoGPT

TEE/glm-5

TEE/glm 5 (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5",
  "label": "TEE/glm 5 (TEE)",
  "model": "TEE/glm-5",
  "status": "failed",
  "ts": "2026-07-16T12:58:28.954400304+00:00",
  "latency_ms": 7289,
  "error": "Nonce mismatch (possible replay): expected 7d945a2f41864349d0449c38caacf6d8124a2b58c0f8cc26e16bf29a577496db, got 63919c46768e6f4c7d50eadb99f4ec82dd4ec392aa07c0e3771e8215e6da7544",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "afff96018f528c3c1d3dc8bdb3b9aa27a6ce389ebde780909e82cb50b2d873af",
    "parsed_evidence_digest": "b72388cea5e7a8e522af76260bf3e2ed149f1ba5652eb3097b00cba30fd6d193"
  }
}

NanoGPT

TEE/glm-5.1-thinking

TEE/glm 5.1 Thinking (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-1-thinking",
  "label": "TEE/glm 5.1 Thinking (TEE)",
  "model": "TEE/glm-5.1-thinking",
  "status": "partial",
  "ts": "2026-07-16T12:58:36.244071107+00:00",
  "latency_ms": 3577,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000007b1c87921d136cc97dcc978706b0dd6c707f37b6369d1d601167b91889e506bc",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "7b1c87921d136cc97dcc978706b0dd6c707f37b6369d1d601167b91889e506bc"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1-thinking&nonce=7b1c87921d136cc97dcc978706b0dd6c707f37b6369d1d601167b91889e506bc",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.1-thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a0cad05852b955e0872bf3bf3e8a6270d534c186d48f2cacb67226432e66a4c7",
    "parsed_evidence_digest": "de0cb2eba4a79c8de8c731a3e1ed9efa2118ee1a9dacedf421c4b8bb379cc280"
  }
}

NanoGPT

TEE/glm-5.2

TEE/glm 5.2 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-2",
  "label": "TEE/glm 5.2 (TEE)",
  "model": "TEE/glm-5.2",
  "status": "partial",
  "ts": "2026-07-16T12:58:39.822067670+00:00",
  "latency_ms": 3379,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000067427d7a1b283ff640cd3d63f2efd1f981f148f1c4747e39cc4b0350831d5b68",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "67427d7a1b283ff640cd3d63f2efd1f981f148f1c4747e39cc4b0350831d5b68"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2&nonce=67427d7a1b283ff640cd3d63f2efd1f981f148f1c4747e39cc4b0350831d5b68",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0fc72635adc746e0d6726a82526be5e2aeb42659f8766ce5a4ed0be4672264b4",
    "parsed_evidence_digest": "a72916064961cad148842cf53c75ae6ca91edd5ca8fae168b0a6402c1ffad82a"
  }
}

NanoGPT

TEE/glm-5.2:thinking

TEE/glm 5.2:thinking (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-glm-5-2-thinking",
  "label": "TEE/glm 5.2:thinking (TEE)",
  "model": "TEE/glm-5.2:thinking",
  "status": "partial",
  "ts": "2026-07-16T12:58:43.201608523+00:00",
  "latency_ms": 3374,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001011a6bbc00b9b1bd0254ac233340c1ce65c484b8dab10ced3f6606e6bfd53c2",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "1011a6bbc00b9b1bd0254ac233340c1ce65c484b8dab10ced3f6606e6bfd53c2"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2%3Athinking&nonce=1011a6bbc00b9b1bd0254ac233340c1ce65c484b8dab10ced3f6606e6bfd53c2",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/glm-5.2:thinking"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "bff62b8094234a52d485afd245e0f18ef6280ff4e5f9e0866a35b90f7b5cc378",
    "parsed_evidence_digest": "7c54e024c1e5758f44c39d02cdbc88f6ec2566931cd40f160b51e4b9e52636d6"
  }
}

NanoGPT

TEE/gpt-oss-20b

TEE/gpt Oss 20b (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-gpt-oss-20b",
  "label": "TEE/gpt Oss 20b (TEE)",
  "model": "TEE/gpt-oss-20b",
  "status": "partial",
  "ts": "2026-07-16T12:58:46.575668240+00:00",
  "latency_ms": 1344,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d87f4f49ea9814155f47648a4c596337d987c43c95970795625c00d1cd4d2557",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-20b&nonce=d87f4f49ea9814155f47648a4c596337d987c43c95970795625c00d1cd4d2557",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "11e9839237034b0fa7b467f146b33c0dea22574c596e7c715f22df210be16c1a",
    "parsed_evidence_digest": "1ddb4c533ec8a9f8e6044437319c75c9cd3cf459b0728ac53158467320f2bc59"
  }
}

NanoGPT

TEE/kimi-k2.5

TEE/kimi K2.5 (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-kimi-k2-5",
  "label": "TEE/kimi K2.5 (TEE)",
  "model": "TEE/kimi-k2.5",
  "status": "failed",
  "ts": "2026-07-16T12:58:47.920422422+00:00",
  "latency_ms": 6424,
  "error": "Nonce mismatch (possible replay): expected 7ddb78ec9eb5809f3b3fe95510ca500c8e3966d0648e59a6e9dd466dfbab8f01, got 6665ff8a21c3294da06a249bb7d016369d228ea12d0cbe291eaa5060b3bd283e",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0412ef7134ac709c3f251d5179017f6d6fdcf3843a3966364b32ca329a4e5ff7",
    "parsed_evidence_digest": "dcab504eca3f4c65eaae789b24c6a063d1dde256aff5cb32dff1f561d4b345cc"
  }
}

NanoGPT

TEE/kimi-k2.5-thinking

TEE/kimi K2.5 Thinking (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-kimi-k2-5-thinking",
  "label": "TEE/kimi K2.5 Thinking (TEE)",
  "model": "TEE/kimi-k2.5-thinking",
  "status": "failed",
  "ts": "2026-07-16T12:58:54.345068890+00:00",
  "latency_ms": 7221,
  "error": "Nonce mismatch (possible replay): expected 70ac22ecff247f25d924921b62d9af3d4ccd93f9ca03371fd94217278398ce5e, got b764a3eab359c469b2c53c841457cf3c87fcf3082767c3c2fbaf77f23324c106",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "4f621246a3dedb5cfe18332a2eb657dfa3d17a5654dda1f785ea003bd55576ec",
    "parsed_evidence_digest": "e81c03b5d407dd69a5b81934b46f55d855ab8a2345b3e7a02f8678b0cf0bd32a"
  }
}

NanoGPT

TEE/minimax-m2.5

TEE/minimax M2.5 (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-minimax-m2-5",
  "label": "TEE/minimax M2.5 (TEE)",
  "model": "TEE/minimax-m2.5",
  "status": "failed",
  "ts": "2026-07-16T12:59:01.566238855+00:00",
  "latency_ms": 5845,
  "error": "Nonce mismatch (possible replay): expected 49bdd230b5f58b97f8615dfcd53b93bb25e84b0fb7628968ca82600556deddf8, got c9c4cf758c4bf8704ee6238c7715e6d06667d11cd6ad540124ee81fc36ed6783",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "28ba1d077d20a3bf1d1fbd65f4e2504b8670667082397388a16b4d4ef39e49a6",
    "parsed_evidence_digest": "c616e1c84862f07e18a3390c81033db6cd6039bfe90795c76c059a37bdfe4453"
  }
}

NanoGPT

TEE/qwen2.5-vl-72b-instruct

TEE/qwen2.5 Vl 72b Instruct (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen2-5-vl-72b-instruct",
  "label": "TEE/qwen2.5 Vl 72b Instruct (TEE)",
  "model": "TEE/qwen2.5-vl-72b-instruct",
  "status": "partial",
  "ts": "2026-07-16T12:59:07.411692776+00:00",
  "latency_ms": 1723,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000fa13916a631b14843f266fc7a7dcb384a2a567e09329772bd96af10af8ef3960",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen2.5-vl-72b-instruct&nonce=fa13916a631b14843f266fc7a7dcb384a2a567e09329772bd96af10af8ef3960",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen2.5-vl-72b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a525219e649f0fd207a94b79c145255f3cabed23a5d562b75243521c2755e62d",
    "parsed_evidence_digest": "277bb953d1cc03cf3c683797773ebe59a006463e9ad174e116a0b8d710ab6337"
  }
}

NanoGPT

TEE/qwen3-30b-a3b-instruct-2507

TEE/qwen3 30b A3b Instruct 2507 (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-30b-a3b-instruct-2507",
  "label": "TEE/qwen3 30b A3b Instruct 2507 (TEE)",
  "model": "TEE/qwen3-30b-a3b-instruct-2507",
  "status": "partial",
  "ts": "2026-07-16T12:59:09.135341047+00:00",
  "latency_ms": 1657,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; NVIDIA GPU evidence verification was not verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d407aac25d8092294d7fa7d66130cac7b2b44a185b92013bacc8631303e98cb5",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3-30b-a3b-instruct-2507&nonce=d407aac25d8092294d7fa7d66130cac7b2b44a185b92013bacc8631303e98cb5",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3-30b-a3b-instruct-2507"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "a2f689f5aae23dc2970883a2d9dd449fff93c830e72292d7c1df984d50c21eff",
    "parsed_evidence_digest": "b1a9f78ee586706127645b979739f31a1b63a90a9a1f02084a577d36fc8270b3"
  }
}

NanoGPT

TEE/qwen3.5-122b-a10b

TEE/qwen3.5 122b A10b (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-5-122b-a10b",
  "label": "TEE/qwen3.5 122b A10b (TEE)",
  "model": "TEE/qwen3.5-122b-a10b",
  "status": "partial",
  "ts": "2026-07-16T12:59:10.793274278+00:00",
  "latency_ms": 3349,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000c45b16270ffeeeb7348f65ace83b566f5fdc4dc4ad662d351470eb72fbbac1f9",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c45b16270ffeeeb7348f65ace83b566f5fdc4dc4ad662d351470eb72fbbac1f9"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-122b-a10b&nonce=c45b16270ffeeeb7348f65ace83b566f5fdc4dc4ad662d351470eb72fbbac1f9",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.5-122b-a10b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "f89eda7ffbb85ca69a40962b5628f1f079e897e1a072a98384e4e35ca4969716",
    "parsed_evidence_digest": "b9cf9c713e56bda4d3185ae239f9cb1d5eb20bf43ae2b0876c1c5044c0baeb30"
  }
}

NanoGPT

TEE/qwen3.5-27b

TEE/qwen3.5 27b (TEE)

failed
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-5-27b",
  "label": "TEE/qwen3.5 27b (TEE)",
  "model": "TEE/qwen3.5-27b",
  "status": "failed",
  "ts": "2026-07-16T12:59:14.142498900+00:00",
  "latency_ms": 9455,
  "error": "Nonce mismatch (possible replay): expected 6cdfc8ba780680230a09ab3638910a95c29cdfad577e8aeca626fe1fbd31c111, got 75b00a4ec363f3b242ba87900ed45a1e043537c1317c482cde3d7f2abe495cdb",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "0a8c6a760131181bd3bd0a2b64a15faf157fde4b889291d9a467bf1a121fbb87",
    "parsed_evidence_digest": "619f44915a005bd0ebb3056b70b6a4a4b081afce2e1c479248185150cdebe17f"
  }
}

NanoGPT

TEE/qwen3.6-27b

TEE/qwen3.6 27b (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-27b",
  "label": "TEE/qwen3.6 27b (TEE)",
  "model": "TEE/qwen3.6-27b",
  "status": "partial",
  "ts": "2026-07-16T12:59:23.598243756+00:00",
  "latency_ms": 3349,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000736d4814e4a85ee83a24a0e89dd0578340d04099fc94b3d4aa8e377086aed184",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "736d4814e4a85ee83a24a0e89dd0578340d04099fc94b3d4aa8e377086aed184"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-27b&nonce=736d4814e4a85ee83a24a0e89dd0578340d04099fc94b3d4aa8e377086aed184",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-27b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "875294333242454856e620cafb6a28081d0c30d656799e4243651d15739f21fe",
    "parsed_evidence_digest": "3c24edf256b1726b9b5d014f23d6d9d758334cd330ef88ad780f82d3ddb178de"
  }
}

NanoGPT

TEE/qwen3.6-35b-a3b

TEE/qwen3.6 35b A3b (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-35b-a3b",
  "label": "TEE/qwen3.6 35b A3b (TEE)",
  "model": "TEE/qwen3.6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-16T12:59:26.947808165+00:00",
  "latency_ms": 3130,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008222496e072a762dd5c48ec743de4724e5abefb11c646b9a8f0d573eaafaa36a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "8222496e072a762dd5c48ec743de4724e5abefb11c646b9a8f0d573eaafaa36a"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b&nonce=8222496e072a762dd5c48ec743de4724e5abefb11c646b9a8f0d573eaafaa36a",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-35b-a3b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "8ab6d0571e75116067dab0955a5ac41b6a8e78efd8d283b8e720fa70a10eb7a9",
    "parsed_evidence_digest": "3280e8c305072fae11b76e1224b6f69d8e41afb6d553266553725443d34d89db"
  }
}

NanoGPT

TEE/qwen3.6-35b-a3b-uncensored

TEE/qwen3.6 35b A3b Uncensored (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "nanogpt",
  "id": "nanogpt-tee-qwen3-6-35b-a3b-uncensored",
  "label": "TEE/qwen3.6 35b A3b Uncensored (TEE)",
  "model": "TEE/qwen3.6-35b-a3b-uncensored",
  "status": "partial",
  "ts": "2026-07-16T12:59:30.078438495+00:00",
  "latency_ms": 2641,
  "error": "Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No attested client channel or request-bound upstream route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000009ce0aebec0dea4f234996f67620877a9b654ed74ab478f739c495101b388d6e8",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "9ce0aebec0dea4f234996f67620877a9b654ed74ab478f739c495101b388d6e8"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b-uncensored&nonce=9ce0aebec0dea4f234996f67620877a9b654ed74ab478f739c495101b388d6e8",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "upstream_model": "TEE/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "failed",
      "detail": "The expected channel key binding failed."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.1.0",
    "policy_hash": "d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8",
    "target_hash": "124c7ef35ce1006a7f41432ded498933ef89a6ae721c12e460933d74b7849546",
    "parsed_evidence_digest": "bb48cb2ed8675cc7542c9a05bfe7693824af9431aebc44f7a9351bce52be6c52"
  }
}