Every request enters through RedPill’s attested gateway. Check the model’s is_tee value and the
response receipt to determine whether the upstream model provider was
also verified. Do not use the TEE-only base URL with a model whose catalog entry has
is_tee: false.