> Only the computer answering it, and it isn't kept afterwards.
Why wouldn't it be kept afterward, there is absolutely no guarantee that the owner of that node won't just retain everything? So basically any rogue GPU node can inject tool calls in responses or just collect prompts...
Are you using some sort of remote attestation/enclave for this?
> Only the computer answering it, and it isn't kept afterwards.
Why wouldn't it be kept afterward, there is absolutely no guarantee that the owner of that node won't just retain everything? So basically any rogue GPU node can inject tool calls in responses or just collect prompts...
Are you using some sort of remote attestation/enclave for this?