Tinfoil
gemma4-31b
Gemma 4 31B
Captured evidence
| Kind | Type | Bytes | SHA-256 | Artifact |
|---|---|---|---|---|
| intel-dcap-collateral | application/json | 22,565 | 34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c | Open |
| provider-attestation-response | application/json | 3,721 | 66d53b9de434d8a64be004eb4dbb1708756baeb39025397b422b98118773dee4 | Open |
| source-provenance-response | application/json; charset=utf-8 | 503 | 96e79d31445b8366c0a936ecb2ec69887108d3ac9ee7480027436edfc0121253 | Open |
| source-provenance-response | application/json; charset=utf-8 | 5,991 | f8fa93ee609898eff0987556a8adee50732a11cb5e91a8e12bdebec3d3afb11e | Open |
| tdx-quote | application/vnd.intel.tdx.quote | 5,006 | 7b6711625312d0e701f480a3c55c0a8ee89be2b597367ef096c443d7525e023a | Open |
| tls-leaf-certificate | application/pkix-cert | 1,442 | 5c4bc4102a516b8fc52d8adcfc2c7891fe75950f95bcbbdcf4708ea1f87a2166 | Open |
| verification-error | text/plain; charset=utf-8 | 246 | 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 | Open |
Sanitized target
{
"provider": "tinfoil",
"id": "tinfoil-gemma4",
"label": "Gemma 4 31B",
"type": "tinfoil",
"url": "https://gemma4-31b-1.inf10.tinfoil.sh/",
"host": "gemma4-31b-1.inf10.tinfoil.sh",
"model": "gemma4-31b",
"metadata": {
"repo": "tinfoilsh/confidential-gemma4-31b"
}
} Parsed decision JSON
{
"provider": "tinfoil",
"id": "tinfoil-gemma4",
"label": "Gemma 4 31B",
"model": "gemma4-31b",
"status": "failed",
"ts": "2026-07-16T20:00:55.586044575+00:00",
"latency_ms": 4134,
"error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
"tdx": {
"tee_tcb_svn": "0b010300000000000000000000000000",
"mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
"mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
"td_attributes": "0000001000000000",
"xfam": "e702060000000000",
"mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
"mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
"report_data": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f",
"rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
"rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
"rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
"rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
"tcb_level": "status=UpToDate, advisories=[]"
},
"tls_fingerprint": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a",
"tls_matches": true,
"sigstore_tag": "v0.0.18",
"sigstore_repo": "tinfoilsh/confidential-gemma4-31b",
"source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
"trust_tier": "none",
"route": {
"route_binding": "verified",
"router": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Configured direct Tinfoil router endpoint."
},
"workload_operator": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Configured direct Tinfoil workload endpoint."
},
"tee_platform": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Tinfoil target and deployment evidence."
}
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "verified",
"detail": "A live TLS handshake proves possession of the quote-bound private key."
},
"channel": {
"state": "verified",
"detail": "The application channel key is bound to attested evidence."
},
"workload": {
"state": "not-proven",
"detail": "No expected workload measurement was verified."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "verified",
"detail": "A request-bound route receipt was verified."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
"target_hash": "ef4108794e425358928574ca1f8feb760727096ac0021da057be9e626834f834",
"parsed_evidence_digest": "892102ef2d8106e82397fc2688b38e3a905a1595ac23bd5e1b98e12ece79a219",
"artifact_set_digest": "71862b4f94417d6b97a2e95b371a44ab5da2ab80f9444bc2abffdba5957adbcd"
},
"evidence_artifacts": [
{
"kind": "provider-attestation-response",
"media_type": "application/json",
"collected_at": "2026-07-16T20:00:56.057243400+00:00",
"source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "66d53b9de434d8a64be004eb4dbb1708756baeb39025397b422b98118773dee4",
"size_bytes": 3721,
"encoding": "binary",
"metadata": {
"date": "Thu, 16 Jul 2026 20:01:21 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "tdx-quote",
"media_type": "application/vnd.intel.tdx.quote",
"collected_at": "2026-07-16T20:00:56.200422194+00:00",
"sha256": "7b6711625312d0e701f480a3c55c0a8ee89be2b597367ef096c443d7525e023a",
"size_bytes": 5006,
"encoding": "binary",
"metadata": {
"backend_id": "gemma4-31b-1.inf10.tinfoil.sh"
}
},
{
"kind": "intel-dcap-collateral",
"media_type": "application/json",
"collected_at": "2026-07-16T20:00:58.127592665+00:00",
"source_url": "https://api.trustedservices.intel.com/",
"sha256": "34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c",
"size_bytes": 22565,
"encoding": "binary",
"metadata": {
"backend_id": "gemma4-31b-1.inf10.tinfoil.sh"
}
},
{
"kind": "tls-leaf-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-07-16T20:00:58.558707109+00:00",
"source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/",
"sha256": "5c4bc4102a516b8fc52d8adcfc2c7891fe75950f95bcbbdcf4708ea1f87a2166",
"size_bytes": 1442,
"encoding": "binary",
"metadata": {
"host": "gemma4-31b-1.inf10.tinfoil.sh"
}
},
{
"kind": "source-provenance-response",
"media_type": "application/json; charset=utf-8",
"collected_at": "2026-07-16T20:00:58.855726676+00:00",
"source_url": "https://api.github.com/repos/tinfoilsh/confidential-gemma4-31b/releases/latest",
"sha256": "f8fa93ee609898eff0987556a8adee50732a11cb5e91a8e12bdebec3d3afb11e",
"size_bytes": 5991,
"encoding": "binary",
"metadata": {
"date": "Thu, 16 Jul 2026 20:00:58 GMT",
"etag": "W/\"84ba340d28161c0bae0de9526383c956ddf30d43b2ec736c9ca033e92db7080f\"",
"http_method": "GET",
"http_status": "200",
"last_modified": "Thu, 11 Jun 2026 01:24:52 GMT"
}
},
{
"kind": "source-provenance-response",
"media_type": "application/json; charset=utf-8",
"collected_at": "2026-07-16T20:00:59.483797702+00:00",
"source_url": "https://api.github.com/repos/tinfoilsh/confidential-gemma4-31b/attestations/sha256:c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85",
"sha256": "96e79d31445b8366c0a936ecb2ec69887108d3ac9ee7480027436edfc0121253",
"size_bytes": 503,
"encoding": "binary",
"metadata": {
"date": "Thu, 16 Jul 2026 20:00:59 GMT",
"etag": "W/\"cdf2f0f169b36ccbb87ce33c3cedf9e92bbba7b46f6a2e2eea64a69eafe05711\"",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "verification-error",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-07-16T20:00:59.719846322+00:00",
"source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
"size_bytes": 246,
"encoding": "utf-8",
"metadata": {
"check_id": "tinfoil-gemma4",
"provider": "tinfoil",
"status": "failed"
}
}
]
}