Damus
PayPerQ · 3d
4/ And just last month an independent researcher found that CrofAI sold "Kimi K3" to its users but was secretly serving cheaper models behind the scenes. https://kendell.dev/blog/crofaifalse/
PayPerQ profile picture
5/ How it works:

• Your prompt is automatically encrypted to a key only the enclave holds
• The enclave decrypts it and sends it on to the provider
• The reply is encrypted back to you from the enclave
• PPQ's backend gets only billing and error metadata. No content!
1
PayPerQ · 3d
6/ Amazon can't peek either. Nitro has no operator login, no SSH, and no way for any AWS employee to read enclave memory. AWS says this holds "including in fulfillment of a law enforcement request." NCC Group independently reviewed the design and found no gaps.