Implementations

An implementation is a specific system that realises one or more mechanisms: a research prototype, a product, an open-source project or a proposed architecture. The Verifies column lists the claims each is aimed at, then, in grey italics, those it supports.

Name	Category	Development	Security evidence	Verifies	Threat model
Apple Private Cloud Compute Apple's cloud AI inference service, in which user devices send requests only to servers that attest to running software published in a public transparency log. Product · Realises TEE remote attestation for AI workloads Provider-reported	On-chip	Operational use Operational use for showing users which software serves their AI requests, not which model. Medium confidence. Semi-trusted prover	Published attack testing · independent	The declared model is the one being served	Semi-trusted prover
Pearl proof-of-useful-work blockchain A blockchain whose mining is designed to be a by-product of GPU matrix multiplications in AI workloads, with public node and miner code. Open-source project · Realises Proofs of useful work for capacity accounting Provider-reported	Crypto / compute	Operational use Operational use for checking matrix-multiplication work proofs for blockchain consensus. Low confidence. Adversarial prover	Published analysis or argument	This compute runs inference, not training	Adversarial prover
Tinfoil model identity (Modelwrap) Tinfoil's open-source tool for proving which model weights its enclave-hosted inference service runs, by building a hash of the weights into the hardware attestation. Product · Realises Hardware-attested weight binding, TEE remote attestation for AI workloads ⚠ Open critical failure Provider-reported	Crypto / compute	Operational use Operational use for showing clients that the served weights match a committed hash. Medium confidence. Semi-trusted prover	Published analysis or argument	The declared model is the one being served	Semi-trusted prover
TOPLOC TOPLOC is a hashing scheme from Prime Intellect that lets a verifier check whether an inference provider ran the model, prompt and precision it claims. Open-source project · Realises Sampled inference recomputation Provider-reported	Crypto / compute	Operational use Operational use for checking that untrusted providers used the claimed model, prompt and precision. Low confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served	Adversarial prover
Verde and RepOps (Gensyn) Gensyn's system for checking machine-learning jobs given to untrusted providers, which settles disputes by re-running one operation with operators Gensyn reports as bit-identical across hardware. Product · Realises Deterministic and bit-exact inference, Training-transcript verification (proof-of-learning) Provider-reported	Crypto / compute	Operational use Operational use for reproducing declared-model inference from receipts in Gensyn's information-market service. Low confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served A training run stayed within declared limits	Adversarial prover
WhatsApp Private Processing Meta's server system for WhatsApp AI features, whose clients check a confidential virtual machine's attestation and transparency-log proofs before connecting. Product · Realises TEE remote attestation for AI workloads Provider-reported	On-chip	Operational use Operational use for showing WhatsApp clients which logged software and artifacts serve their AI requests. Medium confidence. Semi-trusted prover	Published analysis or argument	The declared model is the one being served	Semi-trusted prover
Attestable Audits A research prototype that runs AI safety benchmarks inside a trusted execution environment (TEE) and publishes TEE-signed records linking the model, audit and results. Research prototype · Realises TEE remote attestation for AI workloads, Hardware-attested weight binding, Confidential multi-party verification	On-chip	Research demonstration Research demonstration for attesting a benchmark audit run on a confidential model in an enclave. Low confidence. Semi-trusted prover	Published analysis or argument	The declared model is the one being served The declared evaluation was run	Semi-trusted prover
Batch-invariant inference kernels (Thinking Machines) Open-source GPU kernels from Thinking Machines Lab that make language-model outputs independent of batch size, adopted in vLLM and SGLang for reproducible inference. Open-source project · Realises Deterministic and bit-exact inference Provider-reported	Crypto / compute	Research demonstration Research demonstration for exact recomputation of served outputs by a verifier, with a cooperating provider. Low confidence. Cooperative prover	No published adversarial analysis recorded	The declared model is the one being served	Cooperative prover
Cove Draft Parties who distrust each other chain enclave-run stages; owners release keys to private data only to stages they approved, and each stage issues a certificate. Open-source project · Realises Confidential multi-party verification, TEE remote attestation for AI workloads Provider-reported	Crypto / compute	Research demonstration Draft. Research demonstration for composing owner-approved confidential workflow stages on Intel TDX. Medium confidence. Semi-trusted prover	Published analysis or argument	The declared evaluation was run	Semi-trusted prover
DiFR (Divergence From Reference) DiFR checks that an inference provider ran its declared model by comparing output tokens or activations with a trusted re-run using the same random seed. Research prototype · Realises Sampled inference recomputation	Crypto / compute	Research demonstration Research demonstration for checking that outputs match the declared model, precision and sampling settings. Medium confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served Model weights have not left the facility	Adversarial prover
EZKL EZKL is a library from Zkonduit that turns neural networks into zero-knowledge circuits, so a prover can show an output came from a committed model. Product · Realises Zero-knowledge proofs of inference	Crypto / compute	Research demonstration Research demonstration for proving a language model's output follows from committed weights, against a cheating prover. Medium confidence. Adversarial prover	Published attack testing · independent	The declared model is the one being served The declared evaluation was run	Adversarial prover
GPU contention probes Draft Three timed GPU puzzles whose solve times lengthen when another workload shares the device, a heuristic sign to a verifier that the GPU is shared. Research prototype · Realises Timed challenge-response and memory-occupation challenges	Crypto / compute	Research demonstration Draft. Research demonstration for detecting another workload running on the same GPU. Medium confidence. Adversarial prover	Published analysis or argument	Declared hardware is idle or shut down	Adversarial prover
Kaizen Draft A trainer proves in zero knowledge that a public training algorithm on committed data produced the model; the proof does not grow with training length. Research prototype · Realises Zero-knowledge proofs of training constraints	Crypto / compute	Research demonstration Draft. Research demonstration for proving gradient-descent training of small image models on committed data. Medium confidence. Adversarial prover	Published analysis or argument	A training run stayed within declared limits	Adversarial prover
PAL*M Draft A research prototype in which confidential-computing hardware signs hashes of the models, datasets and results involved in training, evaluation and inference. Research prototype · Realises TEE remote attestation for AI workloads, Hardware-attested weight binding	On-chip	Research demonstration Draft. Research demonstration for attesting declared model operations on a confidential CPU–GPU prototype. Medium confidence. Semi-trusted prover	Published analysis or argument	The declared model is the one being served The declared evaluation was run A training run stayed within declared limits	Semi-trusted prover
PySyft double-blind evaluations OpenMined's PySyft lets a model owner and an evaluator run tests in an attested enclave without showing each other the weights or the private prompts. Research prototype · Realises Confidential multi-party verification Provider-reported	Crypto / compute	Research demonstration Research demonstration for evaluating a private model on private prompts, neither party seeing the other's inputs. Medium confidence. Semi-trusted prover	Published analysis or argument	The declared evaluation was run	Semi-trusted prover
SAGE Draft A software-only attestation scheme in which a GPU must compute a checksum over its own code within a time limit, without trusted GPU hardware. Research prototype · Realises Timed challenge-response and memory-occupation challenges	Crypto / compute	Research demonstration Draft. Research demonstration for attesting code execution on a GPU that lacks hardware trusted-execution support. Medium confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served	Adversarial prover
VeriLoRA Draft Lets a developer prove that individual low-rank (LoRA) fine-tuning steps on a language model were computed correctly, without revealing private weights or training data. Research prototype · Realises Zero-knowledge proofs of training constraints	Crypto / compute	Research demonstration Draft. Research demonstration for proving single-sample LoRA fine-tuning steps for 3–13-billion-parameter language models. Medium confidence. Adversarial prover	Published analysis or argument	A training run stayed within declared limits	Adversarial prover
VRAM-residency challenge Draft A timed challenge that tests whether verifier-supplied data is still held in a GPU's on-board memory or has moved to host memory. Research prototype · Realises Timed challenge-response and memory-occupation challenges	Crypto / compute	Research demonstration Draft. Research demonstration for detecting whether verifier-supplied data remains in a single GPU's memory. Medium confidence. Adversarial prover	Published analysis or argument	Declared hardware is idle or shut down	Adversarial prover
zkLLM zkLLM is a GPU-accelerated zero-knowledge proof system that proves a large language model's output came from committed weights without revealing those weights. Research prototype · Realises Zero-knowledge proofs of inference	Crypto / compute	Research demonstration Research demonstration for proving an output came from committed weights, against a prover who cheats. Medium confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served	Adversarial prover
AI 2040 inference-only verification stack A proposed retrofit that splits data centres into isolated inference units, copies front-end traffic and re-runs random samples to confirm only declared inference runs. Proposed architecture · Realises Network taps and certifiers, Sampled inference recomputation, Whole-workload recomputation (reproducible packets), Bandwidth limits and compartmentalization, Memory wiping and proofs of secure erasure, Tamper evidence for verifier devices, Side-channel suppression for isolated facilities Provider-reported	Isolation & architecture	Proposed Proposed for showing that retrofitted data centres run only inference. Medium confidence. Adversarial prover	No published adversarial analysis recorded	This compute runs inference, not training The declared model is the one being served Communication between compute groups is bounded	Adversarial prover
Attestable zero-knowledge inference prover Attestable's zero-knowledge prover, which the company reports proves large language model outputs came from committed weights at tens of tokens per second. Product · Realises Zero-knowledge proofs of inference Provider-reported	Crypto / compute	Proposed Proposed for proving an output came from committed weights. Low confidence. Adversarial prover	No published adversarial analysis recorded	The declared model is the one being served This compute runs inference, not training Declared safeguards were applied during inference	Adversarial prover
Data-centre memory challenging Draft A proposed design that times answers from a data centre's memory to check that declared data is present or that no free memory remains. Proposed architecture · Realises Timed challenge-response and memory-occupation challenges Provider-reported	Crypto / compute	Proposed Draft. Proposed for confirming data presence and bounding free memory across data-centre servers. Medium confidence. Adversarial prover	Published analysis or argument	This compute runs inference, not training	Adversarial prover
Low-trust AI compute verification system overview A reference design that existing data centres could add: network taps hash all traffic, and air-gapped, independently sourced checkers later re-run randomly chosen records. Proposed architecture · Realises Network taps and certifiers, Sampled inference recomputation, Deterministic and bit-exact inference, Zero-knowledge proofs of inference, Memory wiping and proofs of secure erasure, Timed challenge-response and memory-occupation challenges, Side-channel suppression for isolated facilities Provider-reported	Isolation & architecture	Proposed Proposed for screening challenged records to show declared inference compute is not training. Medium confidence. Adversarial prover	Published analysis or argument	This compute runs inference, not training The declared model is the one being served Declared safeguards were applied during inference Communication between compute groups is bounded	Adversarial prover
Lucid sovereignty (location) certificates A draft specification, hosted by Lucid Computing, for short-lived certificates that bound where a workload runs by timing signed messages to servers at known locations. Standard · Realises Chip location verification Provider-reported	Accounting	Proposed Proposed for certifying the region where an attested workload ran at a given time. Medium confidence. Semi-trusted prover	Published analysis or argument	Chips are where they are declared to be	Semi-trusted prover
Model fingerprint attestation A proposed timed challenge that tests whether declared model weights are already in a chip's memory. Proposed architecture · Realises Timed challenge-response and memory-occupation challenges	Crypto / compute	Proposed Proposed for checking residency of declared model weights with timed challenges. Medium confidence. Adversarial prover	Published analysis or argument	The declared model is the one being served	Adversarial prover
RAND secure inference data center (SIDC) design A RAND design for a purpose-built facility that serves already-trained AI models while protecting weights and inference data against state-level attackers. Proposed architecture · Realises Bandwidth limits and compartmentalization, Side-channel suppression for isolated facilities Provider-reported	Isolation & architecture	Proposed Proposed for the operator's own weight security, with no outside verification described. Low confidence. Semi-trusted prover	Published analysis or argument	Model weights have not left the facility The declared model is the one being served Communication between compute groups is bounded	Semi-trusted prover
SASH confidential network logger An open-source prototype that routes a facility's inference traffic through a logger and re-runs requests on a separate cluster to check the facility serves inference. Research prototype · Realises Network taps and certifiers, Sampled inference recomputation Provider-reported	Off-chip devices	Proposed Proposed for telling inference from training on a mutually inspected cluster. Medium confidence. Semi-trusted prover	No published adversarial analysis recorded	This compute runs inference, not training The declared model is the one being served	Semi-trusted prover