TEE

去中心化推理的可验证性方案包括乐观验证、零知识证明推理（zkML）和可信执行环境（TEE），但尚无完美解决方案

TEEs and HSMs are not absolutely unbreakable, and side-channel attacks, firmware vulnerabilities, and the like remain active research topics.

Passkeys' private keys are stored in the user device's trusted execution environment (TEE) or hardware security module (HSM), and the server only stores the public key.

A TEE is an isolated area inside the main processor, and the operating system and ordinary applications cannot directly read the data within it; the private key's signing operations are completed within that area.

TEE itself still depends on the chip vendor's implementation, and if a backdoor has been implanted in the chip at the manufacturing stage, the protective effect of TEE will also be greatly reduced.

The SayGM gateway runs inside an Intel TDX Trusted Execution Environment (TEE), with TLS terminated within the enclave, so that routing and guardrail logic occurs in a place where neither the operator nor the host machine can read the requests.

Engy's verification scheme requires no TEE or trusted hardware; the proof locks in mathematical operations rather than the machine itself, and therefore services can be provided on permissionless compute clusters (including consumer-grade GPUs).

Sony has introduced an AMD hardware-based Trusted Execution Environment (TEE) in the PS5, isolating sensitive operations such as key management and DRM decryption into a secure enclave outside the main CPU.

In actual products, the combination of TEE and traditional encryption is more practically feasible than homomorphic encryption.

TEE solutions keep data confidential even during use, which is fundamentally different from the traditional model of 'encrypt data for storage, decrypt for use,' where data necessarily exists in plaintext during computation.

A Trusted Execution Environment (TEE) is a physically isolated secure area within a processor where the code and data running inside cannot be directly read even by operating system administrators or cloud service providers.

TEE-based 'hardware-assisted MPC' allows each party to send private data to an attested trusted GPU environment for joint computation, during which no party can obtain the raw inputs of the other parties.

The Remote Attestation mechanism allows users to cryptographically verify before each session that the enclave code has not been tampered with, and is currently the most technically convincing verifiable means in TEE solutions.

Kill switch technical proposals put forward by the industry include embedding encrypted licenses in model weights, setting mandatory interrupt interfaces at the hardware driver level, and monitoring the inference process through Trusted Execution Environments (TEE), but each approach faces issues of performance overhead, security vulnerabilities, or circumventability.

The FLARE architecture facilitates integration of differential privacy libraries (such as OpenDP) or hardware Trusted Execution Environments (TEE), allowing privacy guarantees to be layered on for different deployment environments without modifying the business layer.

Private keys are typically bound to a device's security chip (such as Android's StrongBox or TEE Trusted Execution Environment).

TrustedRouter claims to run on attested infrastructure and positions "provable privacy" as its core selling point

AMD's SEV-SNP and Intel's TDX support encryption at the entire virtual machine level, making it possible to run full AI inference inside a TEE

In the TEE remote attestation mechanism, hardware generates a health report signed by the chip's private key, containing the SHA-256 hash of the running code, hardware configuration, firmware version, and other information, allowing clients to verify that the server is running the expected code in an unmodified TEE environment

The application of TEEs in AI inference scenarios faces a core contradiction between the parameter scale of large language models and TEE memory limitations.