{
  "schema_version": "1.0.0",
  "rubric_version": "1.0",
  "license": "CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)",
  "record": {
    "id": "O-0141",
    "slug": "tinfoil",
    "title": "Tinfoil",
    "aliases": [],
    "status": "draft",
    "last_reviewed": "2026-09-23",
    "review_interval_days": 90,
    "steward": null,
    "provenance": {
      "drafted_by": "ai",
      "reviewed_by": []
    },
    "risk_flags": [],
    "flags": [
      "provider-reported"
    ],
    "kind": "company",
    "homepage": "https://tinfoil.sh/",
    "one_liner": "A company offering AI inference inside secure hardware enclaves, with remote attestation that clients can check; developer of the Modelwrap model-identity tool.",
    "sources": [
      {
        "source": "S-0013",
        "supports": "Modelwrap binds model weights to enclave attestation (provider-reported)"
      },
      {
        "source": "S-1209",
        "supports": "Modelwrap code: dm-verity commitment to model weights"
      },
      {
        "source": "S-1207",
        "supports": "measured boot, reproducible builds, Sigstore measurements, client verification"
      },
      {
        "source": "S-1208",
        "supports": "connection-time verification and transparency logs"
      },
      {
        "source": "S-1206",
        "supports": "supported hardware (AMD SEV-SNP, Intel TDX, NVIDIA confidential-computing mode) and documented limitations"
      }
    ],
    "type": "organization",
    "url": "https://trustbutveri.fyi/organizations/tinfoil/",
    "source_file": "content/organizations/tinfoil.md",
    "flags_all": [
      "provider-reported",
      "ai-drafted"
    ],
    "body_markdown": "Tinfoil describes its product as AI that is \"verifiable, thanks to secure hardware enclaves\". Its documentation and code describe how a client checks what runs in the enclave:\n\n- **Model identity.** Tinfoil developed Modelwrap, which it reports binds model weights to enclave attestation [[S-0013]]. The open-source tool commits the weights to a dm-verity root hash [[S-1209]]. See [[I-0006]] and [[M-0012]].\n- **Attestation architecture.** Tinfoil documents a measured boot chain, reproducible builds, publication of expected measurements through Sigstore, and verification by the client [[S-1207]], with checks at connection time and transparency logs [[S-1208]]; see [[M-0008]].\n- **Supported hardware and limits.** Its documentation lists AMD SEV-SNP and Intel TDX confidential virtual machines, and NVIDIA GPUs in confidential-computing mode, as supported hardware [[S-1206]]. The same page documents limitations, including physical attacks, side channels, I/O leakage, denial of service, supply-chain risks and rollback [[S-1206]].",
    "body_text": "Tinfoil describes its product as AI that is \"verifiable, thanks to secure hardware enclaves\". Its documentation and code describe how a client checks what runs in the enclave: - Model identity. Tinfoil developed Modelwrap, which it reports binds model weights to enclave attestation [S-0013]. The open-source tool commits the weights to a dm-verity root hash [S-1209]. See Tinfoil model identity (Modelwrap) and Model identity attestation. - Attestation architecture. Tinfoil documents a measured boot chain, reproducible builds, publication of expected measurements through Sigstore, and verification by the client [S-1207], with checks at connection time and transparency logs [S-1208]; see TEE remote attestation for AI workloads. - Supported hardware and limits. Its documentation lists AMD SEV-SNP and Intel TDX confidential virtual machines, and NVIDIA GPUs in confidential-computing mode, as supported hardware [S-1206]. The same page documents limitations, including physical attacks, side channels, I/O leakage, denial of service, supply-chain risks and rollback [S-1206].",
    "referenced_by": [
      {
        "id": "M-0012",
        "title": "Model identity attestation",
        "url": "https://trustbutveri.fyi/mechanisms/model-identity-attestation/"
      },
      {
        "id": "M-0008",
        "title": "TEE remote attestation for AI workloads",
        "url": "https://trustbutveri.fyi/mechanisms/tee-remote-attestation/"
      },
      {
        "id": "I-0006",
        "title": "Tinfoil model identity (Modelwrap)",
        "url": "https://trustbutveri.fyi/implementations/tinfoil-model-identity/"
      },
      {
        "id": "S-1207",
        "title": "Backend infrastructure",
        "url": "https://trustbutveri.fyi/sources/tinfoil-docs-attestation-architecture/"
      },
      {
        "id": "S-1206",
        "title": "A primer on secure enclaves",
        "url": "https://trustbutveri.fyi/sources/tinfoil-docs-secure-enclave-primer/"
      },
      {
        "id": "S-1208",
        "title": "How verification works in Tinfoil",
        "url": "https://trustbutveri.fyi/sources/tinfoil-docs-verification-in-tinfoil/"
      },
      {
        "id": "S-1209",
        "title": "modelwrap: Reproducible dm-verity read-only image of Huggingface models",
        "url": "https://trustbutveri.fyi/sources/tinfoil-modelwrap-code/"
      },
      {
        "id": "S-0013",
        "title": "How Tinfoil Proves Exactly What Model Is Running",
        "url": "https://trustbutveri.fyi/sources/tinfoil-proving-model-identity/"
      }
    ]
  }
}