Stored Run Record

Run #819

Completed Jul 16, 2026, 20:01:05 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
6
Verified
0
Incomplete
0
Failed
5
Unavailable
1

Recorded Decisions

Checks in this run

Run JSON

Tinfoil

gemma4-31b

Gemma 4 31B

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,565 34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c Open
provider-attestation-response application/json 3,721 66d53b9de434d8a64be004eb4dbb1708756baeb39025397b422b98118773dee4 Open
source-provenance-response application/json; charset=utf-8 503 96e79d31445b8366c0a936ecb2ec69887108d3ac9ee7480027436edfc0121253 Open
source-provenance-response application/json; charset=utf-8 5,991 f8fa93ee609898eff0987556a8adee50732a11cb5e91a8e12bdebec3d3afb11e Open
tdx-quote application/vnd.intel.tdx.quote 5,006 7b6711625312d0e701f480a3c55c0a8ee89be2b597367ef096c443d7525e023a Open
tls-leaf-certificate application/pkix-cert 1,442 5c4bc4102a516b8fc52d8adcfc2c7891fe75950f95bcbbdcf4708ea1f87a2166 Open
verification-error text/plain; charset=utf-8 246 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gemma4",
  "label": "Gemma 4 31B",
  "type": "tinfoil",
  "url": "https://gemma4-31b-1.inf10.tinfoil.sh/",
  "host": "gemma4-31b-1.inf10.tinfoil.sh",
  "model": "gemma4-31b",
  "metadata": {
    "repo": "tinfoilsh/confidential-gemma4-31b"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gemma4",
  "label": "Gemma 4 31B",
  "model": "gemma4-31b",
  "status": "failed",
  "ts": "2026-07-16T20:00:55.586044575+00:00",
  "latency_ms": 4134,
  "error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
  "tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f",
    "rtmr0": "67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a",
  "tls_matches": true,
  "sigstore_tag": "v0.0.18",
  "sigstore_repo": "tinfoilsh/confidential-gemma4-31b",
  "source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "none",
  "route": {
    "route_binding": "verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "A live TLS handshake proves possession of the quote-bound private key."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "verified",
      "detail": "A request-bound route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "ef4108794e425358928574ca1f8feb760727096ac0021da057be9e626834f834",
    "parsed_evidence_digest": "892102ef2d8106e82397fc2688b38e3a905a1595ac23bd5e1b98e12ece79a219",
    "artifact_set_digest": "71862b4f94417d6b97a2e95b371a44ab5da2ab80f9444bc2abffdba5957adbcd"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:00:56.057243400+00:00",
      "source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "66d53b9de434d8a64be004eb4dbb1708756baeb39025397b422b98118773dee4",
      "size_bytes": 3721,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-16T20:00:56.200422194+00:00",
      "sha256": "7b6711625312d0e701f480a3c55c0a8ee89be2b597367ef096c443d7525e023a",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gemma4-31b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:00:58.127592665+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c",
      "size_bytes": 22565,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gemma4-31b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:00:58.558707109+00:00",
      "source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/",
      "sha256": "5c4bc4102a516b8fc52d8adcfc2c7891fe75950f95bcbbdcf4708ea1f87a2166",
      "size_bytes": 1442,
      "encoding": "binary",
      "metadata": {
        "host": "gemma4-31b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:58.855726676+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gemma4-31b/releases/latest",
      "sha256": "f8fa93ee609898eff0987556a8adee50732a11cb5e91a8e12bdebec3d3afb11e",
      "size_bytes": 5991,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:58 GMT",
        "etag": "W/\"84ba340d28161c0bae0de9526383c956ddf30d43b2ec736c9ca033e92db7080f\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Thu, 11 Jun 2026 01:24:52 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:59.483797702+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gemma4-31b/attestations/sha256:c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85",
      "sha256": "96e79d31445b8366c0a936ecb2ec69887108d3ac9ee7480027436edfc0121253",
      "size_bytes": 503,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:59 GMT",
        "etag": "W/\"cdf2f0f169b36ccbb87ce33c3cedf9e92bbba7b46f6a2e2eea64a69eafe05711\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:00:59.719846322+00:00",
      "source_url": "https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
      "size_bytes": 246,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gemma4",
        "provider": "tinfoil",
        "status": "failed"
      }
    }
  ]
}

Tinfoil

gpt-oss-120b

GPT-OSS 120B

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,565 34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c Open
provider-attestation-response application/json 3,725 0992c769b4daae34110443c5b0f599c8c3f2baaa73dfd89f4d650b3f387bd69b Open
source-provenance-response application/json; charset=utf-8 505 278e3da55d9c140539378072e463ab2b357f1b7d7c20b3b6e38172c38fae547c Open
source-provenance-response application/json; charset=utf-8 6,011 a8687708f53e010ed8aa1059576e606fc88fa0d7d3ed0ad436483d38537261e6 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 72f15962683dcf3d8e5c1865ce96773e6bd4213770d2a28c4ad27c45e11b9f0a Open
tls-leaf-certificate application/pkix-cert 1,444 0357e44ea4c89534930ccd10cfd0d85e4f543db3b6ecb0be9ccfc328a34f9838 Open
verification-error text/plain; charset=utf-8 246 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-120b",
  "label": "GPT-OSS 120B",
  "type": "tinfoil",
  "url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/",
  "host": "gpt-oss-120b-1.inf10.tinfoil.sh",
  "model": "gpt-oss-120b",
  "metadata": {
    "repo": "tinfoilsh/confidential-gpt-oss-120b"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-120b",
  "label": "GPT-OSS 120B",
  "model": "gpt-oss-120b",
  "status": "failed",
  "ts": "2026-07-16T20:00:59.720393599+00:00",
  "latency_ms": 2900,
  "error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
  "tdx": {
    "tee_tcb_svn": "0b010300000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114",
    "mr_config_id": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "report_data": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b",
    "rtmr0": "54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f",
    "rtmr1": "46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51",
    "rtmr2": "956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c",
    "rtmr3": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "tls_fingerprint": "8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b414",
  "tls_matches": true,
  "sigstore_tag": "v0.0.26",
  "sigstore_repo": "tinfoilsh/confidential-gpt-oss-120b",
  "source_url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "none",
  "route": {
    "route_binding": "verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "A live TLS handshake proves possession of the quote-bound private key."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "verified",
      "detail": "A request-bound route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c9c439c312772844b063bb05f9a249d11df2a973d26c9a9e42110131ca05652c",
    "parsed_evidence_digest": "ba7b4b8cc7a0f5d5e822b257de4fcb5eed62f8cf7818f7c8b2fab064da1602fc",
    "artifact_set_digest": "0626b598491640e8b05672a4d2e764d3cb91b12d983afcd15a414889b4303d71"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:01:00.203888048+00:00",
      "source_url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "0992c769b4daae34110443c5b0f599c8c3f2baaa73dfd89f4d650b3f387bd69b",
      "size_bytes": 3725,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:30 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-16T20:01:00.347422640+00:00",
      "sha256": "72f15962683dcf3d8e5c1865ce96773e6bd4213770d2a28c4ad27c45e11b9f0a",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gpt-oss-120b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:01:01.075671677+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "34e94acdb0444a7e26787bb25ccbb46a6225a9aebdae75451e5ac235d211250c",
      "size_bytes": 22565,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gpt-oss-120b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:01:01.508436698+00:00",
      "source_url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/",
      "sha256": "0357e44ea4c89534930ccd10cfd0d85e4f543db3b6ecb0be9ccfc328a34f9838",
      "size_bytes": 1444,
      "encoding": "binary",
      "metadata": {
        "host": "gpt-oss-120b-1.inf10.tinfoil.sh"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:01:01.764386925+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gpt-oss-120b/releases/latest",
      "sha256": "a8687708f53e010ed8aa1059576e606fc88fa0d7d3ed0ad436483d38537261e6",
      "size_bytes": 6011,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:01 GMT",
        "etag": "W/\"7252b33bb2aed6e22ae2d7e869d0ff0a87f381559f6782479f06cbdd8c35de1e\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 05 Jun 2026 22:09:58 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:01:02.386988558+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gpt-oss-120b/attestations/sha256:4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972",
      "sha256": "278e3da55d9c140539378072e463ab2b357f1b7d7c20b3b6e38172c38fae547c",
      "size_bytes": 505,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:02 GMT",
        "etag": "W/\"c47a833a29a14ee574b4656b0122a2dd88ec446d664c7efd7a2dd9922453abf8\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:01:02.620023513+00:00",
      "source_url": "https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
      "size_bytes": 246,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gpt-oss-120b",
        "provider": "tinfoil",
        "status": "failed"
      }
    }
  ]
}

Tinfoil

gpt-oss-safeguard-120b

GPT-OSS Safeguard 120B

failed

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b Open
provider-attestation-response application/json 605 8d9c160c3c0e50f0b161c74d21cd678c4230f5417a1917791986b9baf872d0ec Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 c2612fd9070cdf9d25f481104159113247d9ee3d32417f09027dbc5471c926eb Open
source-provenance-response application/json; charset=utf-8 497 4a4e10d7d7288fa0dec541a0d5c976f18bc5489b8fa7b9f69f7ae6dd9f48cee3 Open
source-provenance-response application/json; charset=utf-8 6,091 74a300db65d7529439d8cb808ec23b69b2fdecb9826a5f4c6b72891d08ac8cdc Open
tls-leaf-certificate application/pkix-cert 1,487 189194cf41427d06a82d5a90cc6521aeedbc72717ae5458787760a52159f7cf1 Open
verification-error text/plain; charset=utf-8 246 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-safeguard",
  "label": "GPT-OSS Safeguard 120B",
  "type": "tinfoil",
  "url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/",
  "host": "gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev",
  "model": "gpt-oss-safeguard-120b",
  "metadata": {
    "repo": "tinfoilsh/confidential-gpt-oss-safeguard-120b"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-gpt-oss-safeguard",
  "label": "GPT-OSS Safeguard 120B",
  "model": "gpt-oss-safeguard-120b",
  "status": "failed",
  "ts": "2026-07-16T20:01:02.620680155+00:00",
  "latency_ms": 2635,
  "error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e6668665ddbf0541157ffb70e94f438ba3d34a6551112ee09e42393b9450cb031",
    "measurement": "f58e91177fe591d3e4a9d6fdd26e9173990123c0ec9be3d66076dfb9210834b337c0a08c4ce66a180306347012d4de43",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b"
  },
  "tls_fingerprint": "8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e",
  "tls_matches": true,
  "sigstore_tag": "v0.0.8",
  "sigstore_repo": "tinfoilsh/confidential-gpt-oss-safeguard-120b",
  "source_url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
  "trust_tier": "none",
  "route": {
    "route_binding": "verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "A live TLS handshake proves possession of the quote-bound private key."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "verified",
      "detail": "A request-bound route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "45f9268efa532b4108ef53474486a66295e954252959f4f84c41ec9fb4d9b2c9",
    "parsed_evidence_digest": "c7d21c7cdc525e3dd32a903bf1590f856671273e2ea0f82d763313458b1bca6a",
    "artifact_set_digest": "89092d183e4eb35b920fcf92d1fac743856699baf0b2e0d1a87baff17c6cf0d5"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:01:03.194810588+00:00",
      "source_url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
      "sha256": "8d9c160c3c0e50f0b161c74d21cd678c4230f5417a1917791986b9baf872d0ec",
      "size_bytes": 605,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:15 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-16T20:01:03.357004476+00:00",
      "sha256": "c2612fd9070cdf9d25f481104159113247d9ee3d32417f09027dbc5471c926eb",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:01:03.358102727+00:00",
      "sha256": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev",
        "product": "Genoa"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:01:03.899293837+00:00",
      "source_url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/",
      "sha256": "189194cf41427d06a82d5a90cc6521aeedbc72717ae5458787760a52159f7cf1",
      "size_bytes": 1487,
      "encoding": "binary",
      "metadata": {
        "host": "gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:01:04.160606788+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gpt-oss-safeguard-120b/releases/latest",
      "sha256": "74a300db65d7529439d8cb808ec23b69b2fdecb9826a5f4c6b72891d08ac8cdc",
      "size_bytes": 6091,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:04 GMT",
        "etag": "W/\"c9c5ed251d0dcf53703912fe847d344998dfb4bf54a5440bddcaec1727c01e2f\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 05 Jun 2026 21:19:32 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:01:04.933804032+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-gpt-oss-safeguard-120b/attestations/sha256:7d7ecc9c5430e6f8324b30712d0d8346d04eff45a98e5b732de0f6160dfc7c0c",
      "sha256": "4a4e10d7d7288fa0dec541a0d5c976f18bc5489b8fa7b9f69f7ae6dd9f48cee3",
      "size_bytes": 497,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:04 GMT",
        "etag": "W/\"2c757fdac61147251ac2427d5e575e86ad1bd4891dad475e5b63cde5856c58d7\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:01:05.255707215+00:00",
      "source_url": "https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
      "sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
      "size_bytes": 246,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-gpt-oss-safeguard",
        "provider": "tinfoil",
        "status": "failed"
      }
    }
  ]
}

Tinfoil

kimi-k2-6

Kimi K2.6

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
verification-error text/plain; charset=utf-8 172 56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-kimi-k2-6",
  "label": "Kimi K2.6",
  "type": "tinfoil",
  "url": "https://kimi-k2-6.inf13.tinfoil.sh/",
  "host": "kimi-k2-6.inf13.tinfoil.sh",
  "model": "kimi-k2-6",
  "metadata": {
    "repo": "tinfoilsh/confidential-kimi-k2-6-b200"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-kimi-k2-6",
  "label": "Kimi K2.6",
  "model": "kimi-k2-6",
  "status": "unreachable",
  "ts": "2026-07-16T20:00:55.270336498+00:00",
  "latency_ms": 315,
  "error": "Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "3f2230f8eac45ce447a029569e565a5dfebe5085a747b08aa5673f73ca0b6a6a",
    "parsed_evidence_digest": "c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43",
    "artifact_set_digest": "e880d6e1f32ffc1d14df2237f7d964358896811a2089b54b1a4260bd0aa3ca8b"
  },
  "evidence_artifacts": [
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:00:55.585681594+00:00",
      "source_url": "https://kimi-k2-6.inf13.tinfoil.sh/",
      "sha256": "56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea",
      "size_bytes": 172,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-kimi-k2-6",
        "provider": "tinfoil",
        "status": "unreachable"
      }
    }
  ]
}

Tinfoil

llama3-3-70b

Llama 3.3 70B

failed

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b Open
provider-attestation-response application/json 605 61e16470bcb42e88e58af563f1ac0e1a06c575a2dd76a27091cd7b5d2bd7daa9 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 8ff5072809775d77dc0faa4c4a505c934e0cb8d9bbbbd8af494aed9d8f1f236b Open
source-provenance-response application/json; charset=utf-8 5,998 3f50a399b65abac5a522cc77dff4f4f2d811155e5d2570268b26bbf406732f1a Open
source-provenance-response application/json; charset=utf-8 499 416ab937cc55f3e2acf408ae85ae730d49ac7be651a148d1e04881bdc362b9d7 Open
tls-leaf-certificate application/pkix-cert 1,471 b27b73f22e0f0cb2e1ba13f5c2bae41741272991d8857c39ac31ea4e618710b3 Open
verification-error text/plain; charset=utf-8 246 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-llama",
  "label": "Llama 3.3 70B",
  "type": "tinfoil",
  "url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/",
  "host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
  "model": "llama3-3-70b",
  "metadata": {
    "repo": "tinfoilsh/confidential-llama3-3-70b"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-llama",
  "label": "Llama 3.3 70B",
  "model": "llama3-3-70b",
  "status": "failed",
  "ts": "2026-07-16T20:00:52.999556382+00:00",
  "latency_ms": 2270,
  "error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b"
  },
  "tls_fingerprint": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde6884",
  "tls_matches": true,
  "sigstore_tag": "v0.0.25",
  "sigstore_repo": "tinfoilsh/confidential-llama3-3-70b",
  "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
  "trust_tier": "none",
  "route": {
    "route_binding": "verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "A live TLS handshake proves possession of the quote-bound private key."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "verified",
      "detail": "A request-bound route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "ffdbe1888c9b018da94094537c21e3f86676a8687dffbebdff585b35b5e85c29",
    "parsed_evidence_digest": "bbddb94a94491e142aae8a02221edadd573babcbecb703f52202faed08ddb790",
    "artifact_set_digest": "4f2005faa57792d6c7a38ddbede999a740540555913587fa07f0f2dc839b31da"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:00:53.527394444+00:00",
      "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
      "sha256": "61e16470bcb42e88e58af563f1ac0e1a06c575a2dd76a27091cd7b5d2bd7daa9",
      "size_bytes": 605,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:01:05 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-16T20:00:53.691633099+00:00",
      "sha256": "8ff5072809775d77dc0faa4c4a505c934e0cb8d9bbbbd8af494aed9d8f1f236b",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "llama3-3-70b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:00:53.692641171+00:00",
      "sha256": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
        "product": "Genoa"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:00:54.229010412+00:00",
      "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/",
      "sha256": "b27b73f22e0f0cb2e1ba13f5c2bae41741272991d8857c39ac31ea4e618710b3",
      "size_bytes": 1471,
      "encoding": "binary",
      "metadata": {
        "host": "llama3-3-70b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:54.489696647+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-llama3-3-70b/releases/latest",
      "sha256": "3f50a399b65abac5a522cc77dff4f4f2d811155e5d2570268b26bbf406732f1a",
      "size_bytes": 5998,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:54 GMT",
        "etag": "W/\"3e10cb51d76093d0929f5ae851d467c47fb8d1145b210d61e10abacab9a305e3\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 05 Jun 2026 21:21:37 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:55.032076528+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-llama3-3-70b/attestations/sha256:8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
      "sha256": "416ab937cc55f3e2acf408ae85ae730d49ac7be651a148d1e04881bdc362b9d7",
      "size_bytes": 499,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:54 GMT",
        "etag": "W/\"b60ab514b01308c51f6d4b42feea99f2ecf15d3440c93b633a8da00f5bac37b5\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:00:55.269956676+00:00",
      "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
      "sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
      "size_bytes": 246,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-llama",
        "provider": "tinfoil",
        "status": "failed"
      }
    }
  ]
}

Tinfoil

Router

Router

failed

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b Open
provider-attestation-response application/json 605 783dfbb941322bc050d48c05d57ee627643da53d76ea3a6591ddd9f73e85b04a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 040614af0dbdad07b74d2678ae883fd45417757584cfa4f324790469b402d0e8 Open
source-provenance-response application/json; charset=utf-8 6,016 4d82ccfcdfe86a77d2604a76ad5119cd9c5713131e1ece0d6011755ce01c4cab Open
source-provenance-response application/json; charset=utf-8 499 df347e856e3dbbfe1bd88c6b60e96c6c37a3e682a7f11219ed5a4146f06cf78b Open
tls-leaf-certificate application/pkix-cert 891 c7a815c9c4212098226ac3a8f69e14ac20fcee666f496298bbb7945216719aa3 Open
verification-error text/plain; charset=utf-8 246 18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56 Open
Sanitized target
{
  "provider": "tinfoil",
  "id": "tinfoil-router",
  "label": "Router",
  "type": "tinfoil",
  "url": "https://inference.tinfoil.sh/",
  "host": "inference.tinfoil.sh",
  "model": null,
  "metadata": {
    "channel": "gateway",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "tinfoil",
  "id": "tinfoil-router",
  "label": "Router",
  "status": "failed",
  "ts": "2026-07-16T20:00:49.053473772+00:00",
  "latency_ms": 3946,
  "error": "Trust decision failed: Sigstore verification error: Decoding failed: No payload in DSSE envelope; Sigstore provenance bundle was not verified; Sigstore expected measurement match was not verified; Pinned image digest verification was not verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b",
    "measurement": "98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b"
  },
  "tls_fingerprint": "1c53d211618948cbdde5cf3d8e3c3fa70f78624e57f90190abe4ef804270ebcb",
  "tls_matches": false,
  "version": "v0.0.121",
  "sigstore_tag": "v0.0.121",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil router endpoint."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Configured direct Tinfoil workload endpoint."
    },
    "tee_platform": {
      "organization": "tinfoil",
      "confidence": "verified",
      "evidence": "Tinfoil target and deployment evidence."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-applicable",
      "detail": "This gateway target does not claim a quote-bound client channel."
    },
    "channel": {
      "state": "not-applicable",
      "detail": "Gateway TLS termination is expected for this target."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-applicable",
      "detail": "This target is the gateway workload, not a storefront-to-model route."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242",
    "parsed_evidence_digest": "4def63ffb17321e0f504cdeb145ffb115cf64e79f8d98442dcc20e2d64df751d",
    "artifact_set_digest": "40db0ddf5fa676828839140481b07a726801758a9364cf7974fb28cd6c6f35fb"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-16T20:00:49.535526214+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "783dfbb941322bc050d48c05d57ee627643da53d76ea3a6591ddd9f73e85b04a",
      "size_bytes": 605,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:49 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-16T20:00:49.696275160+00:00",
      "sha256": "040614af0dbdad07b74d2678ae883fd45417757584cfa4f324790469b402d0e8",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:00:50.303901751+00:00",
      "sha256": "18f7ad2e0bcb51eedc0772591d948d6d0998a1b856fe6b29aebebd6744dddc4b",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-16T20:00:51.922551943+00:00",
      "source_url": "https://inference.tinfoil.sh/",
      "sha256": "c7a815c9c4212098226ac3a8f69e14ac20fcee666f496298bbb7945216719aa3",
      "size_bytes": 891,
      "encoding": "binary",
      "metadata": {
        "host": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:52.179195041+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
      "sha256": "4d82ccfcdfe86a77d2604a76ad5119cd9c5713131e1ece0d6011755ce01c4cab",
      "size_bytes": 6016,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:52 GMT",
        "etag": "W/\"d10ec88206ce18c72971c33ad429aa2aae5f2793397685a92d98d9534b615636\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Thu, 16 Jul 2026 02:07:11 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-16T20:00:52.766599603+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef",
      "sha256": "df347e856e3dbbfe1bd88c6b60e96c6c37a3e682a7f11219ed5a4146f06cf78b",
      "size_bytes": 499,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 16 Jul 2026 20:00:52 GMT",
        "etag": "W/\"b9995e7c1358aaeae0ba1a8e5f92131aa7ac42e7484493d7381bcf215797fa69\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-16T20:00:52.998699003+00:00",
      "source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
      "sha256": "18992bbbacf159a6e6ddec21eb69be32814cab6e77dff14a9e03a2f6783a3a56",
      "size_bytes": 246,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "tinfoil-router",
        "provider": "tinfoil",
        "status": "failed"
      }
    }
  ]
}