Privatemode
gemma-4-31b
Gemma 4 31b
Sanitized target
Target configuration was not retained.
Parsed decision JSON
{
"provider": "privatemode",
"id": "privatemode-gemma-4-31b",
"label": "Gemma 4 31b",
"model": "gemma-4-31b",
"status": "partial",
"ts": "2026-07-16T17:00:17.467941418+00:00",
"latency_ms": 4348,
"error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
"images_verified": true,
"version": "v1.21.0",
"compose_images": [
"docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9",
"ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
"ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
"ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba",
"ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4",
"ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944",
"ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb",
"quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"
],
"manifest_pinned_measurements": [
"manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf",
"SNP/Genoa:fad4113937545dc568d61c26",
"TDX:a7568bf0b3630aa33402bfec",
"coordinator:coordinator.privatemode.ai:443",
"contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
"contrast-active-manifest:verified"
],
"manifest_workloads": [
"gemma-4-31b",
"gemma-latest",
"gpt-oss-120b",
"gpt-oss-latest",
"kimi-k2.6",
"kimi-latest",
"openai/gpt-oss-120b",
"openai/whisper-large-v3",
"qwen3-embedding-4b",
"voxtral-mini-3b",
"whisper-large-v3"
],
"source_url": "http://localhost:58080/v1/models",
"signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
"trust_tier": "tee-only",
"route": {
"route_binding": "not-verified",
"workload_operator": {
"organization": "edgeless-systems",
"confidence": "declared",
"evidence": "Privatemode architecture."
},
"tee_platform": {
"organization": "contrast",
"confidence": "verified",
"evidence": "Privatemode architecture and active Contrast manifest evidence."
},
"cloud_host": {
"organization": "scaleway",
"confidence": "declared",
"evidence": "Privatemode architecture documentation."
}
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "not-proven",
"detail": "No verifier-owned challenge binding was exposed."
},
"channel": {
"state": "not-proven",
"detail": "No attested application channel binding was verified."
},
"workload": {
"state": "verified",
"detail": "Measured workload evidence matched the configured expectation."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "not-proven",
"detail": "No request-bound storefront-to-backend route receipt was verified."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
"target_hash": "cb8b987a40b67770220bb32d8131314bf5c398d422409da8d2050bf1bffc02c7",
"parsed_evidence_digest": "f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"
}
}