Hacker News Reader

With confidential compute / TEEs you can guarantee that the code is running, it's verifiable with remote attestation

So where does the guarantee stop? At the GPU driver level? Firmware level?

What if the GPU has a custom bios flash that somehow logs the unencrypted prompts?

goes all the way to keys owned by Nvidia and Intel

SGX has been cracked

depends on your threat model