Your prompts are the asset
The most valuable thing you send a vendor is the prompt itself. Today you take its handling on faith. Attestation turns that faith into evidence.
Every request runs inside a hardware enclave you can attest to. Prompts are sealed before they reach the GPU, and each response carries a signed receipt naming the model, the runtime and the silicon that produced it.
The most valuable thing you send a vendor is the prompt itself. Today you take its handling on faith. Attestation turns that faith into evidence.
The DPDP Rules in India and sector rules increasingly ask how a model produced an output. A signed receipt answers that without a vendor interview.
Verification cannot depend on our goodwill. The verifier is open source, so you confirm the claims yourself instead of asking us.
The enclave proves which runtime, which image and which silicon it runs on. The quote is signed by Intel or NVIDIA, not by us.
Your prompt is encrypted to the enclave's key. It stays unreadable to us, to the host and to anything outside the CPU.
Inference runs with confidential computing enabled. Guest memory stays encrypted, so the hypervisor only ever sees ciphertext.
The response carries a signed record of the model hash, runtime version and measurement, verifiable offline and after the fact.
A receipt is a file. Verification is a command. Nothing in the loop requires our servers to be online, or our word to be good.
$ abhigya verify --receipt 0x8f21c47d
runtime abhigya-runtime@2.4.1 matches release
model deepseek/deepseek-v4.1-flash matches registry
image 4f2a-9c1e matches digest
hardware H100 SXM, CC on quote valid
platform Intel TDX signed by Intel
verdict VERIFIED