Damus
PayPerQ · 3d
5/ How it works: • Your prompt is automatically encrypted to a key only the enclave holds • The enclave decrypts it and sends it on to the provider • The reply is encrypted back to you from the...
PayPerQ profile picture
6/ Amazon can't peek either. Nitro has no operator login, no SSH, and no way for any AWS employee to read enclave memory. AWS says this holds "including in fulfillment of a law enforcement request." NCC Group independently reviewed the design and found no gaps.
1
PayPerQ · 3d
7/ Model fraud is ruled out the same way. The enclave's code binds each model family to its provider. A Claude request can go to Anthropic or the fallback of openrouter and nowhere else. Every response carries a signed routing receipt: the model you asked for, the provider it went to, the exact mo...