[derpsteb]

I was part of a team that does the same thing. Arguably as a paid service, but source availability and meaningful attestation.

Service: https://www.privatemode.ai/ Code: https://github.com/edgelesssys/privatemode-public

[jmort]

OpenPCC is Apache 2.0 without a CLA to prevent rugpulls whereas edgeless is BSL

[jiveturkey]

<3

[m1ghtym0]

Exactly, attestation is what matters. Excluding the inference provider from the prompt is the USP here. Privatemode can do that via an attestation chain (source code -> reproducible build -> TEE attestation report) + code/stack that ensures isolation (Kata/CoCo, runtime policy).