Skip to main content
dRouter
Vault locked
Confidential AI Router

Ask frontier AI models without anyone, including us, reading your prompt.

Your browser checks the hardware first, then encrypts your message so only that sealed hardware can open it.

Standby

Waiting to verify hardware.

Your browser verifies 7 hardware and software checks before sending any prompt.

See the 7 checks (Unavailable (not verified yet))Chip ID: Unavailable (verify hardware first)
  1. C1Hardware signature chain
    Unavailable

    Unavailable (verification has not run for this check)

  2. C2Approved open-source release
    Unavailable

    Unavailable (verification has not run for this check)

  3. C3Session key bound to hardware
    Unavailable

    Unavailable (verification has not run for this check)

  4. C4Running code matches release
    Unavailable

    Unavailable (verification has not run for this check)

  5. C5Router-attested confidential GPUs
    Unavailable

    Unavailable (verification has not run for this check)

  6. C6Registry admission
    Unavailable

    Unavailable (verification has not run for this check)

  7. C7Pinned model and disk image
    Unavailable

    Unavailable (verification has not run for this check)

Click Verify hardware above to establish an attested session.

How this turn is protected: Your browser runs preparePrompt locally (scrubbing identifiers and 0 vault custom terms), pads the wire payload to a power-of-two byte bucket, attaches an x-drouter-credit header when a blind token is in your wallet, and encrypts the body with HPKE so the relay cannot read it.

What this does not hide
  • Tinfoil's safeguards classifier (gpt-oss-safeguard-120b with kimi-k3 review) sees prompts inside the enclave and reports policy violations to https://api.tinfoil.sh.
  • Tinfoil's usage reporter counts token usage inside the enclave.
  • Kimi K3 context here is 262,144 tokens (not 1M).
  • Nodes sim-1, sim-2, and sim-3 are simulated in software.
  • The Circle Arc registry (0xbc8085c2b6fe6e0db05f169925c0b841828f4481, chain 5042002) is a testnet.
Client key: HKDF-SHA384(freeze_secret, session_id)
Interactive Guide

How it works

See what leaves your browser on the wire and try four short experiments on memory encryption and blind credits.

Open guide
Autonomous Workflow

Watch the agent

Inspect how the Gemini 4 Argon agent verifies enclave proofs, scrubs sensitive tokens, and pauses for human approval.

Open agent
Hardware & Logs

Check the proof

Audit the AMD SEV-SNP and Intel TDX attestation reports, Sigstore build provenance, and adversarial threat checks.

Open proof