Follow one request through the dark.
Trace a single prompt from your keystroke to its answer — encrypted before it leaves you, routed blindly, computed without ever being read, and returned in sealed ciphertext. Watch how zero plaintext exposure actually works.
Sealed before it leaves you
Your prompt is encrypted inside your own device. The key is derived locally and never transmitted — so what travels the wire is already opaque ciphertext.
- End-to-end key derived on-device
- Plaintext never touches the network
- Forward-secret per request
Routed blindly across the network
An onion-style relay forwards the sealed payload through independent hops. No single relay knows both who you are and where the request is going.
- Metadata stripped at every hop
- No relay sees source and destination
- Path randomized per request
Computed without ever decrypting you
The model runs inside a sealed enclave. Computation happens on data the operator cannot read — the node serves your request without seeing a single token of it.
- Sealed enclave, attested at runtime
- Operator has zero read access
- Memory wiped the instant it completes
Answered in sealed ciphertext
The completion is re-sealed inside the enclave before it leaves. It travels back along the same blind path and only your device holds the key to open it.
- Response sealed in-enclave
- Decryptable only on your device
- Nothing persisted along the way
No one in the path ever saw it
From keystroke to completion, no relay, node, or operator ever held a readable copy. There is nothing to log, leak, sell, or subpoena — because it never existed in the clear.
- Nothing readable ever stored
- Nothing to leak or hand over
- Privacy by construction, not policy
The guarantee
Zero plaintext exposure,
end to end.
Across every hop of the pipeline, not one relay, node, or operator ever held a readable copy of your request. There is nothing to log, leak, or hand over — privacy guaranteed by construction, not by a promise.
Privacy by construction
We did not build a policy that says we won't look. We built a network where it is not possible to look. The difference is the whole point.