{"type":"rich","version":"1.0","author_name":"redshift (npub1ft…redsh)","author_url":"https://nostr.ae/npub1ftt05tgku25m2akgvw6v7aqy5ux5mseqcrzy05g26ml43xf74nyqsredsh","provider_name":"njump","provider_url":"https://nostr.ae","html":"I understand your concern. I'm also learning this as we go. \n\nJust to note: \nroutstrd: routstr daemon that you run locally. it's a client that communicates with Routstr nodes\nRoutstr nodes (they run routstr-core): providers who offer AI models for sats. \n\nroutstrd uses our sdk which in turn uses tinfoil's SDK (https://github.com/Routstr/routstr-sdk/blob/main/client/TinfoilSecure.ts) to encrypt the message body on the client side to Tinfoil's servers where decryption happens. They have TEE-terminated TLS so you can be sure that the decryption happens inside their TEE. (source: https://confidentialinference.net/providers/tinfoil). \n\nSo Routstr nodes, nostr:npub1fetz9dt4eka56h0dpyly335v60mjf7k4gu2z7rqmptkz72e2pvhqvejzfa in this case, cannot read any of your messages, you can verify this by running a node yourself. If there is a way to read your messages it has to be on the Tinfoil side, that is if their system is not well set up. Let's look at Tinfoil:\n\nHere we are attesting that their TEEs run their released binary on Github. Yes, we are essentially trusting that new Github binaries don't contain any backdoors. These are the guarantees we have: \n1. The enclave is real AMD SEV-SNP hardware. SEV-SNP report verified against AMD VCEK. \n2. The code inside is the auditable open-source release. Sigstore bundle for tinfoilsh/confidential-model-router.\n3. The measured code is what's actually running. Enclave measurement == signed release measurement\n4. The request body can only be read by that enclave. EHBP encrypts to attested HPKE public key\n5. A third party can't pretend to be Tinfoil. Certificate SANs bind HPKE key + attestation hash to *.tinfoil.sh\n\nAuditing everything is very hard for us. Happy to hear any feedback here and improve our setup and/or support better TEE inference providers if any. \n\nTagging the TEE experts I know here: nostr:npub1aljazgxlpnpfp7n5sunlk3dvfp72456x6nezjw4sd850q879rxqsthg9jp nostr:npub1gzuushllat7pet0ccv9yuhygvc8ldeyhrgxuwg744dn5khnpk3gs3ea5ds nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj"}