Zero-Trust Attestation
Tinfoil
12/12 hardware + TCB0 verified8 incomplete0 failed4 not current
End-to-end verification requires every required evidence gate to be verified. Incomplete evidence means no required gate explicitly failed, but at least one was not proven, was not evaluated, or was excluded as not applicable. It does not imply that hardware verification passed.
Last checked: Oct 27, 2026, 20:01:16 UTC
Latest attempt complete; discovery complete; 12/12 targets completed; 8 excluded (unsupported utility/modality or non-confidential model class)
Summary
Availability issueThe verifier could not fetch fresh evidence for every check in this run.
Hardware12/12 goodTCB policy12/12 goodFreshness12/12 goodChannel binding12/12 goodWorkload identity11 warningSource provenance11 warningRequest route4 warningAvailability4 warning
Workload identity not proven7Source provenance not proven7Endpoint unavailable4Request route not applicable1
Decision Large (router-verified)AMD SEV-SNP
Endpoint unavailableFresh evidence could not be fetched in this run.
Decision Medium (router-verified)AMD SEV-SNP
Endpoint unavailableFresh evidence could not be fetched in this run.
Decision Small (router-verified)AMD SEV-SNP
Endpoint unavailableFresh evidence could not be fetched in this run.
DeepSeek V4.1 Flash (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
Gemma4 31B (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
GLM 5.3 (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
GPT OSS 120B (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
GPT OSS Safeguard 120B (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
Kimi K3 (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
Llama3.3 70B (router-verified)AMD SEV-SNPAttested E2EE
Workload identity not provenNo expected workload measurement was verified.
Pii Filter (router-verified)AMD SEV-SNP
Endpoint unavailableFresh evidence could not be fetched in this run.
RouterAMD SEV-SNPTEE-Terminated TLS
Request route not applicableThis target is the gateway workload, not a storefront-to-model route. This required gate is excluded, so end-to-end verification is not claimed.