Stored Run Record

Run #814

Completed Jul 16, 2026, 15:01:22 UTC UTC

Parsed result only

This legacy run predates reconstruction-grade storage. Its parsed check result is retained, but exact policy, target configuration, and raw inputs may be unavailable.

Total checks
13
Verified
0
Incomplete
12
Failed
0
Unavailable
1

Recorded Decisions

Checks in this run

Run JSON

Chutes

deepseek-ai/DeepSeek-V3.2-TEE

Deepseek Ai/DeepSeek V3.2 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-deepseek-ai-deepseek-v3-2-tee",
  "label": "Deepseek Ai/DeepSeek V3.2 TEE (TEE)",
  "model": "deepseek-ai/DeepSeek-V3.2-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:48.897945213+00:00",
  "latency_ms": 9173,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "08b2225afcc22d3a5c929eb9d699e58268bcd2e57a59e4b8e100d58dfe113474a2f7287384894c01ac2796f42aeb1a9dccae61c2d203227e99f34e24c8eb8093",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "08b2225afcc22d3a5c929eb9d699e58268bcd2e57a59e4b8e100d58dfe113474"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026031300-7f2b15c9e6e9"
  ],
  "manifest_workloads": [
    "chute:deepseek-ai/DeepSeek-V3.2-TEE",
    "instance:42392f46-da99-4408-8898-a762cc2e2abf",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:a7e62ac04ecb2c0a54d736dc46601c5606cf10a6",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:d63d064c-4add-5213-b278-d3125c8078fd",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/398651e1-5f85-5e50-a513-7c5324e8e839/evidence?nonce=d6ff3ee96e177f701a439407bb441d5415c5794f68f452ac4210c592ed69be18",
  "signing_public_key": "ml-kem-768:42392f46-da99-4408-8898-a762cc2e2abf",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "07bf2a3a9d8e95343a0c35405effb4c1e365c255c5556a2cd0680484579524aa",
    "parsed_evidence_digest": "49482d0af3b30b06af7442b73df7abf65e3d85febd61c9087db5a41ebf89e957"
  }
}

Chutes

google/gemma-4-31B-turbo-TEE

Google/gemma 4 31B Turbo TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-google-gemma-4-31b-turbo-tee",
  "label": "Google/gemma 4 31B Turbo TEE (TEE)",
  "model": "google/gemma-4-31B-turbo-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:26.762214133+00:00",
  "latency_ms": 16242,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "6b1d5f062bbc800dfa868fb85f6432cfdc55296b2cb95febf31fe493f7925c7e730129017ed29ace604a44ce06c88e493e11821738ec215349d24f8379e5acd5",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "6b1d5f062bbc800dfa868fb85f6432cfdc55296b2cb95febf31fe493f7925c7e"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:google/gemma-4-31B-turbo-TEE",
    "instance:b6aab389-a5d2-449b-b902-e93c706bf90a",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e5ef03afa233c35cb000323ff098d4291e1dd07c",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/42ee92ba-a537-5a73-8741-876067750db7/evidence?nonce=c23c1b1b642ede32721a3b67b783270346fdff3ab7fb2ec57eb06efa1d00b334",
  "signing_public_key": "ml-kem-768:b6aab389-a5d2-449b-b902-e93c706bf90a",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d00f9b114e76f734d4ce1702b85a8c3f96d553260ec27ce558cb545096d6ee24",
    "parsed_evidence_digest": "93c0ee5b78911018c1f583090c15a01d8f45fb21ca89d94aa2d45508bd79188d"
  }
}

Chutes

MiniMaxAI/MiniMax-M2.5-TEE

MiniMaxAI/MiniMax M2.5 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-minimaxai-minimax-m2-5-tee",
  "label": "MiniMaxAI/MiniMax M2.5 TEE (TEE)",
  "model": "MiniMaxAI/MiniMax-M2.5-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:01:11.586094769+00:00",
  "latency_ms": 7042,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "6dce11852b98a77ec321688094436b734b050c9a7368b28d9fb49ae0602aba33547717537a4216cf6a61a37a128ffee2b435b6205c7de68bf996a06e8c4caeb1",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "6dce11852b98a77ec321688094436b734b050c9a7368b28d9fb49ae0602aba33"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026043000"
  ],
  "manifest_workloads": [
    "chute:MiniMaxAI/MiniMax-M2.5-TEE",
    "instance:7178e1ce-0a4f-4e88-b083-a891d64b96ca",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:37649bdaab7de76902236a546b2df436a93a33ba",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.5",
    "image-id:fef3b089-b516-5c04-bf72-ae56ad48492a",
    "image-status:built and pushed",
    "image-chutes-version:0.6.5"
  ],
  "source_url": "https://api.chutes.ai/chutes/ce6a92e4-5c2f-5681-9742-c80a4447bbdf/evidence?nonce=dc8dfcdc8dcaa55787740b6ee4f568c239831b60508256ca6317f73dc45b73fa",
  "signing_public_key": "ml-kem-768:7178e1ce-0a4f-4e88-b083-a891d64b96ca",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d2ffad2aaff903c7c6ef3173b1d910a92cf46ee94f4ee48eff29a1ed296c1d54",
    "parsed_evidence_digest": "c060bf420f0a8d005facbdd3dc69c463ed70b2a15356d4060d2eede5b4cf9ff4"
  }
}

Chutes

moonshotai/Kimi-K2.5-TEE

Moonshotai/Kimi K2.5 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-moonshotai-kimi-k2-5-tee",
  "label": "Moonshotai/Kimi K2.5 TEE (TEE)",
  "model": "moonshotai/Kimi-K2.5-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:01:08.721962060+00:00",
  "latency_ms": 6591,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "cfc400c27414254469ce66f72761c3a4ef0294052b2c1cf551b6b6bd700987b57ac02748c685ac38cf9eecb77158577938356939204afbbada67c8650f3bcdd1",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "cfc400c27414254469ce66f72761c3a4ef0294052b2c1cf551b6b6bd700987b5"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1b"
  ],
  "manifest_workloads": [
    "chute:moonshotai/Kimi-K2.5-TEE",
    "instance:245b7ff2-4f05-4fd5-a96c-ea79b756f633",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:3367c8d1c68584429fab7faf845a32d5195b6ac1",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/2ff25e81-4586-5ec8-b892-3a6f342693d7/evidence?nonce=c91878848401c30e0d1ecec201cf616052fcc59dda0f18eaafd93f215fabd3bc",
  "signing_public_key": "ml-kem-768:245b7ff2-4f05-4fd5-a96c-ea79b756f633",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2d2211f35445f701e203b3d619de2a4fd012cc919c293130cd4830ac1370938d",
    "parsed_evidence_digest": "785840ef26d88163c2af2985862c9684fa3b15bb6bea0d6cb51189bba6a154af"
  }
}

Chutes

moonshotai/Kimi-K2.6-TEE

Moonshotai/Kimi K2.6 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-moonshotai-kimi-k2-6-tee",
  "label": "Moonshotai/Kimi K2.6 TEE (TEE)",
  "model": "moonshotai/Kimi-K2.6-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:58.071241309+00:00",
  "latency_ms": 9173,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0e010400000000000000000000000000",
    "mr_seam": "346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "23b8aa9a45c2144ebc41ddf81a7348457883000c654fb78eeeaa9286c85caa4866da067b87bb126f6217c126c31e87427f2223e6907e5f3bd3fcdc67960e5779",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "23b8aa9a45c2144ebc41ddf81a7348457883000c654fb78eeeaa9286c85caa48"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/vllm:nightly-2026031400-03df6abfe49f"
  ],
  "manifest_workloads": [
    "chute:moonshotai/Kimi-K2.6-TEE",
    "instance:0d613d4b-9abb-4edd-942a-33f19ddbedc7",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:d9cb81bc88b9bd2dc89877599f23c614ded72b9c",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:5bbb13bc-c050-518d-bb55-79994b540ec2",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/aac09863-35b4-5d9b-9b67-6e6a9d54273a/evidence?nonce=adafa525307cbf6ee66a3edb2a15fcb09b8d161b951a68079ef7bba7173021f7",
  "signing_public_key": "ml-kem-768:0d613d4b-9abb-4edd-942a-33f19ddbedc7",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "ec64250c1bc814c2afb985778508120b91381f1fd745302fc79024fe96c73730",
    "parsed_evidence_digest": "26c58086666e42acbccb30d02b804108ba60295255a89b6921a6f46648faa54f"
  }
}

Chutes

Qwen/Qwen3-235B-A22B-Thinking-2507-TEE

Qwen/Qwen3 235B A22B Thinking 2507 TEE (TEE)

unreachable
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-235b-a22b-thinking-2507-tee",
  "label": "Qwen/Qwen3 235B A22B Thinking 2507 TEE (TEE)",
  "model": "Qwen/Qwen3-235B-A22B-Thinking-2507-TEE",
  "status": "unreachable",
  "ts": "2026-07-16T15:01:08.076180899+00:00",
  "latency_ms": 645,
  "error": "Chutes evidence returned HTTP 400 Bad Request",
  "source_url": "https://api.chutes.ai/chutes/21d129e5-8426-5c29-a6be-844e0f5f5e30/evidence?nonce=a7f1cdb0124d03df0137d7bca4faa46e2610156b060227913784b722d11ba68d",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "declared",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "declared",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "5cd9d9c30899bb0cc6a08da52ee5e9f97892a326fec5c5639125ccfae64d04f6",
    "parsed_evidence_digest": "1fff5399e6275d8f740cef5964bbc3f1b020d5d83d2aeeacd99297895782bcfe"
  }
}

Chutes

Qwen/Qwen3-32B-TEE

Qwen/Qwen3 32B TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-32b-tee",
  "label": "Qwen/Qwen3 32B TEE (TEE)",
  "model": "Qwen/Qwen3-32B-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:26.761291382+00:00",
  "latency_ms": 8855,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "da9245034095b0972a01ecea02104248b7a9404a2ec2eec25e4edfde8751686a46426133c3271bdb1cddbff652812a4be89ead429efa79bc67f3d591f9a8c5ca",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "da9245034095b0972a01ecea02104248b7a9404a2ec2eec25e4edfde8751686a"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3-32B-TEE",
    "instance:6447295b-da10-401f-b611-236419d07830",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:aa55da1ecc13d006e8b8e4f54579b1ea8c3db2df",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/ac059e33-eb27-541c-b9a9-24b214036475/evidence?nonce=d05aca8812fcb21c47066b8c87f6754c5d95bc7905cb047a9377dc754bc803a8",
  "signing_public_key": "ml-kem-768:6447295b-da10-401f-b611-236419d07830",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c891eaf0bcc3badb306b83762cce633e1f2be6ab0bc2a5dce18c5eb853b25a0d",
    "parsed_evidence_digest": "5020946c49e7fb3e97b85d376059f70cafbf556a971b3851b0ac8c9192510718"
  }
}

Chutes

Qwen/Qwen3.5-397B-A17B-TEE

Qwen/Qwen3.5 397B A17B TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-5-397b-a17b-tee",
  "label": "Qwen/Qwen3.5 397B A17B TEE (TEE)",
  "model": "Qwen/Qwen3.5-397B-A17B-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:43.004530936+00:00",
  "latency_ms": 8105,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "13b869dade7833762b612c69e2505ad067e5fb2ad12e73c9cf0e3c1246f376b7ab240009c3493cfdf4217d35a9e7538333ed4dd6b41e3df8a2b3506ebb862e3f",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "13b869dade7833762b612c69e2505ad067e5fb2ad12e73c9cf0e3c1246f376b7"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1b"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3.5-397B-A17B-TEE",
    "instance:71baed3f-98e0-48aa-aefe-52cc4ef9c33f",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:9f1f3de9a3a48cfd340fd73ca98c02625b7afb3b",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/51a4284a-a5a0-5e44-a9cc-6af5a2abfbcf/evidence?nonce=5a00fd24ad2ffebc18003888afb2fccb36cd6d9d76a1df25fd3a32d25f29fce0",
  "signing_public_key": "ml-kem-768:71baed3f-98e0-48aa-aefe-52cc4ef9c33f",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bce90b0775287652c0edaa7ad4c619f46742562363203ce1885e679d136dbaf7",
    "parsed_evidence_digest": "20247c9b922b83a8c66a1cbde6524fd12dda59707ece68259dc5d481f17c010a"
  }
}

Chutes

Qwen/Qwen3.6-27B-TEE

Qwen/Qwen3.6 27B TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-qwen-qwen3-6-27b-tee",
  "label": "Qwen/Qwen3.6 27B TEE (TEE)",
  "model": "Qwen/Qwen3.6-27B-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:35.616843469+00:00",
  "latency_ms": 13281,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "b8a743cf49b4b8bd1d94673f116a5561f61bcc2c8c997d2e871d1a1bebcbc720c659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b8a743cf49b4b8bd1d94673f116a5561f61bcc2c8c997d2e871d1a1bebcbc720"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.13-post1c"
  ],
  "manifest_workloads": [
    "chute:Qwen/Qwen3.6-27B-TEE",
    "instance:8a39b8d0-2145-49df-8d88-0b7ec3cd7d46",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e89b16ebf1988b3d6befa7de50abc2d76f26eb09",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/7aa5e899-c0ba-5482-af48-d3f31d635c9f/evidence?nonce=d6d0954126c3c15c84741037af430c25d6b8681f9feffd3e1f7d96a31d24377b",
  "signing_public_key": "ml-kem-768:8a39b8d0-2145-49df-8d88-0b7ec3cd7d46",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2666b65ef0f7a94c047038f447c54b93d44ffa0d4f10a7fb0c8fc37b2d74ad7a",
    "parsed_evidence_digest": "83b41ae59fb864be97df8be0bc347e51e977f9aa29fe5e45a4cdd2012f298bfb"
  }
}

Chutes

unsloth/Mistral-Nemo-Instruct-2407-TEE

Unsloth/Mistral Nemo Instruct 2407 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-unsloth-mistral-nemo-instruct-2407-tee",
  "label": "Unsloth/Mistral Nemo Instruct 2407 TEE (TEE)",
  "model": "unsloth/Mistral-Nemo-Instruct-2407-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:01:07.245087684+00:00",
  "latency_ms": 4340,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010600000000000000000000000000",
    "mr_seam": "fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "9cca7ad501a7ccedd46f937f4c2592bdbabd475f5d4c4eea422d845de278b24d2ef1b4f08819defbb5d7ffedb43646a2d36c6182fcab1f3488f15bdfb26d37d9",
    "rtmr0": "0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "9cca7ad501a7ccedd46f937f4c2592bdbabd475f5d4c4eea422d845de278b24d"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"
  ],
  "manifest_workloads": [
    "chute:unsloth/Mistral-Nemo-Instruct-2407-TEE",
    "instance:2f78d30d-c09a-4f3d-98d6-da25b05d0cc7",
    "certificate-present:true",
    "gpu-evidence-count:1",
    "revision:e9976040f42d8a5590ed58cefe973061b3f973b5",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.8",
    "image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e",
    "image-status:built and pushed",
    "image-chutes-version:0.6.8"
  ],
  "source_url": "https://api.chutes.ai/chutes/7725a31d-28df-5bb7-9d29-c23b49df5472/evidence?nonce=42cd1386fcdaefd4a6a2571eca592fee4c54652e486bd1b8ca1a9731b012f988",
  "signing_public_key": "ml-kem-768:2f78d30d-c09a-4f3d-98d6-da25b05d0cc7",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "390946768b31d16be5209974bdc32623c7760125bfe7c1516a9d8a5312ccd8b9",
    "parsed_evidence_digest": "5f7b1c65053923a41a26c3dd0b39c2d8b2f88bebaf4f333a02a5568730e238e8"
  }
}

Chutes

zai-org/GLM-5.1-TEE

Zai Org/GLM 5.1 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-1-tee",
  "label": "Zai Org/GLM 5.1 TEE (TEE)",
  "model": "zai-org/GLM-5.1-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:00:51.110415603+00:00",
  "latency_ms": 9651,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "0b4acac7a599700ddedfa734c7265ff06496bfe50e3372af9724a615aa34ac2b0c7428cec02f3359bae81630ea9ded77072976469ac93288a45deeda8f48366b",
    "rtmr0": "7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "0b4acac7a599700ddedfa734c7265ff06496bfe50e3372af9724a615aa34ac2b"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026032100-6483b7da6ccd"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5.1-TEE",
    "instance:0dccf736-cc77-4b3d-a07e-76bd87844c4e",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:f396cf805182f4ca10fa675e1a99815b3ca384db",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.6",
    "image-id:ae476f71-ed8f-562e-b1af-49d49c948d6f",
    "image-status:built and pushed",
    "image-chutes-version:0.6.6"
  ],
  "source_url": "https://api.chutes.ai/chutes/b048fe26-0352-5c46-acf7-335e527e7f3d/evidence?nonce=8e9e8cf9f4bef5c7073fb3696a52cf4193231709d266a73d197433aca84335a7",
  "signing_public_key": "ml-kem-768:0dccf736-cc77-4b3d-a07e-76bd87844c4e",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "69ef3de27eaf4a117b372e2e5eed01426b7db527f5e868cf09ab8ccc70dd7a00",
    "parsed_evidence_digest": "30a23b35588c33c8d32b53b670c9d03dc45250c147c1419b37f494f5b37c1e41"
  }
}

Chutes

zai-org/GLM-5.2-TEE

Zai Org/GLM 5.2 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-2-tee",
  "label": "Zai Org/GLM 5.2 TEE (TEE)",
  "model": "zai-org/GLM-5.2-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:01:00.761732553+00:00",
  "latency_ms": 7314,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "07030400000000000000000000000000",
    "mr_seam": "aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "332c6b62ac9a5685d273775d8e325b27cd35e3ea45110e5ad0d89fad0bac220b722be30e147f151cb2d5d406081b8b5cba67b176c241bb87f26a62bc79793114",
    "rtmr0": "35038cbb04f872ac6d2784b05c912c438007583e58960dc66fb02d1b04462dd5994f94536da37b5877ccd3dd27d8d54d",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "332c6b62ac9a5685d273775d8e325b27cd35e3ea45110e5ad0d89fad0bac220b"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:0.5.15-post1a"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5.2-TEE",
    "instance:f38a1220-734a-4553-86e4-d466cd69bc33",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:aec724e8c7b8ee9db3b48c01c320f63f9cdaf8aa",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.11.rc2",
    "image-id:e5589f58-64d3-51f6-8a3d-146b1cd77940",
    "image-status:built and pushed",
    "image-chutes-version:0.6.11.rc2"
  ],
  "source_url": "https://api.chutes.ai/chutes/08901219-159f-55a7-87cf-9d0d02744668/evidence?nonce=d0e47eb19b7a453d44df7e1dfd1337cf9b2bcc55a74ae4dd85eb9f625a59a9fa",
  "signing_public_key": "ml-kem-768:f38a1220-734a-4553-86e4-d466cd69bc33",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "010b8b43fb30d29f74d3c217877ddb6acfba8ce6854102a780d9bbb856d1275b",
    "parsed_evidence_digest": "5a9a2838ba4b0fe74dcf761082093b17e76dd8d346f0ba071a182ca2c6d6f706"
  }
}

Chutes

zai-org/GLM-5-TEE

Zai Org/GLM 5 TEE (TEE)

partial
Sanitized target

Target configuration was not retained.

Parsed decision JSON
{
  "provider": "chutes",
  "id": "chutes-zai-org-glm-5-tee",
  "label": "Zai Org/GLM 5 TEE (TEE)",
  "model": "zai-org/GLM-5-TEE",
  "status": "partial",
  "ts": "2026-07-16T15:01:15.313358937+00:00",
  "latency_ms": 7163,
  "error": "Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote",
  "tdx": {
    "tee_tcb_svn": "0d010400000000000000000000000000",
    "mr_seam": "489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "5fb61bd1ebc51c43ec1a961f102bfe018082a4c36bc71318186ff7e1a4e0bcd144a8df888a1a040ae04314cee9f765205d855d05894e9e721e1a8525ba0ba844",
    "rtmr0": "212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b",
    "rtmr1": "9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207",
    "rtmr2": "8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968",
    "rtmr3": "51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5fb61bd1ebc51c43ec1a961f102bfe018082a4c36bc71318186ff7e1a4e0bcd1"
  },
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "config_images": [
    "registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"
  ],
  "manifest_workloads": [
    "chute:zai-org/GLM-5-TEE",
    "instance:03aabc20-7230-4761-bf57-e9e5cedb685c",
    "certificate-present:true",
    "gpu-evidence-count:8",
    "revision:949e09d70b611943740a3d79a0f46a63947498a6",
    "lock-modules:true",
    "external-egress:false",
    "chutes-version:0.6.8",
    "image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e",
    "image-status:built and pushed",
    "image-chutes-version:0.6.8"
  ],
  "source_url": "https://api.chutes.ai/chutes/e51e818e-fa63-570d-9f68-49d7d1b4d12f/evidence?nonce=2ce6ebc4f03ddf26f43f626333a9c07f5c499bae1eca0d2ab9b095d32db5eebf",
  "signing_public_key": "ml-kem-768:03aabc20-7230-4761-bf57-e9e5cedb685c",
  "signing_algo": "ML-KEM-768 E2E",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ML-KEM-768 E2E",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Direct Chutes target and deployment evidence."
    },
    "tee_platform": {
      "organization": "chutes",
      "confidence": "corroborated",
      "evidence": "Chutes TEE target and evidence format."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "9135e6f03592a4caa16574be2e6edac58db27edc10d2973b2ce1d74ea15fb45f",
    "parsed_evidence_digest": "c020ca18613bb939d34bb8976cbd3209eb713ce2c2859e6ed9cd683e716125ed"
  }
}