Skip to content

Private assistant · NEAR AI Cloud · TEE

Ask privately. Check the enclave.

Questions go to Qwen/Qwen3.6-35B-A3B-FP8, a model NEAR AI runs inside an Intel TDX confidential VM with NVIDIA GPU attestation. Your browser makes a fresh nonce, the model's attestation is requested with it, and the answer is signed by the key that attestation binds. This site relays the question and stores nothing.

Ask a question

0/400
  • Short questions only (400 characters), a few per minute. Not financial advice.
  • Never paste a seed phrase or private key. Nothing here needs one.
  • This site keeps no logs or copies of questions or answers. NEAR AI's private inference runs the model inside the TEE.

Verified

Waiting for a question
  1. ·
    Fresh nonce in the TDX quoteYour browser made this nonce; the quote's report_data ends with it, so the report was produced for this question.
  2. ·
    Signing key bound in the quotereport_data starts with the model's signing address, so that key lives in the attested enclave.
  3. ·
    Nonce echoedThe report says it answered this nonce.
  4. ·
    Your request is what was signedsha256 of the exact request bytes equals the hash the model signed.
  5. ·
    This answer is what was signedsha256 of the exact response bytes equals the hash the model signed. The answer below is read from those bytes.
  6. ·
    Model matchesSigned text, report and request all name Qwen/Qwen3.6-35B-A3B-FP8.
  7. ·
    Signature recovers the attested keyECDSA (EIP-191) recovery in your browser gives the address bound in the quote.
·Intel DCAP on the model's quoteruns after an answer

Your browser checks the bindings above and runs the same 19 Intel DCAP checks as /verify on the model's TDX quote, up to the pinned Intel root. It also checks that your nonce is NVIDIA's eat_nonce and sits in every GPU's signed measurement request. NVIDIA certificate chains and GPU measurements are verified with NEAR AI's verifier from the download (how). Do not paste secrets: our route keeps nothing, but the prompt is processed by NEAR AI Cloud under its own terms.

Enclave answers about your own account come from the KEYHOLE worker and are checked on /verify.