Physical Access Stops Being Enough 🔗
Running a model on data you cannot show has meant handing it to a sealed area on the processor and trusting that the seal holds, and those seals have been broken often enough to stop being news.
$VVV serves models from GPUs it does not own, and on $SOL any app doing the same inherits whoever made the part in the middle, because the host machine has to be trusted not to look.
Blackthorn takes that host out of the trust chain entirely. The graphics card still runs the model in its own confidential mode, the keys to that session are held as fragments across a cluster of nodes, and the machine relaying the work never holds enough to read any of it. Blackthorn is not live yet.
What that changes is the worst case. Someone standing in the datacentre with the host in front of them still gets nothing readable, because the part that could have opened it is no longer in the stack.
The layer underneath is Cerberus, which is already running, and there is no sealed processor anywhere in that path today.
Confidential AI has always had one component everybody had to trust, and Arcium is building the version that removes it.
#altcoinseason #AI
Running a model on data you cannot show has meant handing it to a sealed area on the processor and trusting that the seal holds, and those seals have been broken often enough to stop being news.
$VVV serves models from GPUs it does not own, and on $SOL any app doing the same inherits whoever made the part in the middle, because the host machine has to be trusted not to look.
Blackthorn takes that host out of the trust chain entirely. The graphics card still runs the model in its own confidential mode, the keys to that session are held as fragments across a cluster of nodes, and the machine relaying the work never holds enough to read any of it. Blackthorn is not live yet.
What that changes is the worst case. Someone standing in the datacentre with the host in front of them still gets nothing readable, because the part that could have opened it is no longer in the stack.
The layer underneath is Cerberus, which is already running, and there is no sealed processor anywhere in that path today.
Confidential AI has always had one component everybody had to trust, and Arcium is building the version that removes it.
#altcoinseason #AI