Stored Run Record

Run #818

Completed Jul 16, 2026, 19:00:48 UTC UTC

Parsed result only

This legacy run predates reconstruction-grade storage. Its parsed check result is retained, but exact policy, target configuration, and raw inputs may be unavailable.

Total checks
6
Verified
0
Incomplete
4
Failed
0
Unavailable
2

Execution Context

Reconstruction metadata

Schema version
1
Started
Jul 16, 2026, 19:00:48 UTC UTC
Completed
Jul 16, 2026, 19:00:48 UTC UTC
Verifier version
0.2.2
Verifier source digest
Not recorded
Verifier binary digest
Not recorded
Dependency lock digest
Not recorded
Git commit
Not recorded
Policy digest
12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d
Target-set digest
60ffac6e990912c446aaf8d658f41c6c5ea4b01f492a0d606245be9f36cd8319
Previous run digest
Chain start or legacy record
Run digest
Not recorded for legacy run
Previous link
Not recorded
Run contents
Not recorded
Check records
Not recorded

These hashes detect changes inside the stored run chain. They are not a signature or an externally anchored transparency log, so they do not prove who controlled the database at collection time.

Verifier policy

Policy document was not retained for this legacy run.

Sanitized targets (0)

Exact target configuration was not retained for this legacy run.

Recorded Decisions

Checks in this run

Run JSON

PPQ.AI

private/gemma4-31b

Gemma 4 31B (TEE)

partial
Check ID
ppq-gemma4
Observed
Jul 16, 2026, 19:00:40 UTC UTC
Latency
6003 ms
Result digest
624d7db876552cd68172aa4a91ee9a34d595f4b05ce627cbee8f81038b6ff1b0 Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "model": "private/gemma4-31b",
  "status": "partial",
  "ts": "2026-07-16T19:00:40.119135015+00:00",
  "latency_ms": 6003,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "1411760c573593161a23f75f6be22d8910958b53cc17867963ade74b7d02b3aca080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "gemma4-31b-1.inf10.tinfoil.sh",
  "backend_tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-gemma4-31b",
  "backend_sigstore_tag": "v0.0.18",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85",
  "backend_images_verified": true,
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b",
  "signing_public_key": "a080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "acf306b477fc284e3f62c7bb43a10196639cc2f77c5c5912c59b85ae1a1afed9",
    "parsed_evidence_digest": "624d7db876552cd68172aa4a91ee9a34d595f4b05ce627cbee8f81038b6ff1b0"
  }
}

PPQ.AI

private/glm-5-2

GLM 5.2 (TEE)

partial
Check ID
ppq-glm-5-2
Observed
Jul 16, 2026, 19:00:38 UTC UTC
Latency
2037 ms
Result digest
37231a95665fff2c14c6f22677a1b7d800100086cd2484d32e69c25accc17d8e Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "model": "private/glm-5-2",
  "status": "partial",
  "ts": "2026-07-16T19:00:38.081523865+00:00",
  "latency_ms": 2037,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
  "signing_public_key": "48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "057e53d29b2a0c93814e3d1952064ce88f5037d3c6df62c1a4a4dee4a8c6be49",
    "parsed_evidence_digest": "37231a95665fff2c14c6f22677a1b7d800100086cd2484d32e69c25accc17d8e"
  }
}

PPQ.AI

private/gpt-oss-120b

GPT-OSS 120B (TEE)

partial
Check ID
ppq-gpt-oss-120b
Observed
Jul 16, 2026, 19:00:17 UTC UTC
Latency
10487 ms
Result digest
5ba2bde2f843eb66748aa3c0eb5921502c866efc84d0aeeb594610eb601098c0 Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "private/gpt-oss-120b",
  "status": "partial",
  "ts": "2026-07-16T19:00:17.175903810+00:00",
  "latency_ms": 10487,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "gpt-oss-120b-1.inf10.tinfoil.sh",
  "backend_tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b",
    "rtmr0": "54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-gpt-oss-120b",
  "backend_sigstore_tag": "v0.0.26",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972",
  "backend_images_verified": true,
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b",
  "signing_public_key": "48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d2a179163d2a032cd27af72eab064e0688f49b6a7cb256fb629894ead40a4beb",
    "parsed_evidence_digest": "5ba2bde2f843eb66748aa3c0eb5921502c866efc84d0aeeb594610eb601098c0"
  }
}

PPQ.AI

private/kimi-k2-6

Kimi K2.6 (TEE)

unreachable
Check ID
ppq-kimi-k2-6
Observed
Jul 16, 2026, 19:00:46 UTC UTC
Latency
2335 ms
Result digest
c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43 Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "model": "private/kimi-k2-6",
  "status": "unreachable",
  "ts": "2026-07-16T19:00:46.122599416+00:00",
  "latency_ms": 2335,
  "error": "Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "342133ccad6f32f4dcb44c1c4039010455279b2325e2009b9cd9c83e3c8a5bcf",
    "parsed_evidence_digest": "c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43"
  }
}

PPQ.AI

private/llama3-3-70b

Llama 3.3 70B (TEE)

partial
Check ID
ppq-llama3-70b
Observed
Jul 16, 2026, 19:00:27 UTC UTC
Latency
7804 ms
Result digest
e6b7506b1b6b2f6010808bf5b22f15bbb79b26ad76f7deeac60b1e115b57f26d Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "private/llama3-3-70b",
  "status": "partial",
  "ts": "2026-07-16T19:00:27.663536595+00:00",
  "latency_ms": 7804,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.121",
  "release_digest": "a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
  "backend_snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "c2770c928f8a821fc2357d4e1155d093c9ba8e3648d5ffacbd19062ebf377f31"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-llama3-3-70b",
  "backend_sigstore_tag": "v0.0.25",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
  "backend_images_verified": true,
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"
  ],
  "backend_config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104",
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
  "signing_public_key": "48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "f510ed2ebec5af86a6b14c34a8f0868312f08e5a720f678f40984cc1a7364d19",
    "parsed_evidence_digest": "e6b7506b1b6b2f6010808bf5b22f15bbb79b26ad76f7deeac60b1e115b57f26d"
  }
}

PPQ.AI

private/qwen3-vl-30b

Qwen3-VL 30B (TEE)

unreachable
Check ID
ppq-qwen3-vl
Observed
Jul 16, 2026, 19:00:35 UTC UTC
Latency
2613 ms
Result digest
a2597e9845be832b73b10f96d9a44a5d3246ae345392a63e62e150570096ac56 Not recorded
Route binding
Not request-bound
Artifacts
0
Sanitized target

Target configuration was not retained.

Parsed decision JSON 
{
  "provider": "ppq",
  "id": "ppq-qwen3-vl",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "private/qwen3-vl-30b",
  "status": "unreachable",
  "ts": "2026-07-16T19:00:35.467568412+00:00",
  "latency_ms": 2613,
  "error": "Network error: Tinfoil attestation request to qwen3-vl-30b.inf10.tinfoil.sh: error sending request for url (https://qwen3-vl-30b.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "f73df4b8c9516fde5ff06e193dad148cb1bd38e02b8eb486bc2c353d2446aa45",
    "parsed_evidence_digest": "a2597e9845be832b73b10f96d9a44a5d3246ae345392a63e62e150570096ac56"
  }
}