Tinfoil request flow using routstr (npub130m…l29s) daemon and Private Provider
User prompt
│
▼
Native UI or Pi
│ localhost OpenAI request
▼
routstrd / Routstr SDK
│
├── Detects tinfoil-* model
├── Fetches enclave attestation
├── Verifies hardware and expected code
├── Obtains attested encryption key
├── Encrypts request body
└── Spends Cashu token
│
▼
Routstr Core proxy
│
├── Sees routing and billing headers
├── Does not see prompt plaintext
└── Forwards encrypted body
│
▼
Attested Tinfoil enclave
│
├── Decrypts request
├── Runs model
└── Encrypts streamed response
│
▼
routstrd decrypts response locally
│
▼
Native UI or Pi

