Reloading the page starts a new chat.

A private chat

Your messages are kept in the enclave's memory only and sent to the model encrypted. The rail shows what your browser checked.

Verify this chat

Checking in your browser.

Youyour browser
TLS, ends inside the enclave
AWS Nitro enclavethis agentreadable
E2EE: encrypted to a key in the TDX VM
Venicerelays encrypted messages; sees timing and sizes
Intel TDX VMNEAR AI, decrypts and runs glm-5.3-flashIts GPUs and model software: not checkedreadable

Readable only in your browser and the two marked enclaves, if your padlock matches the fingerprints below. The AWS host, Venice and NEAR AI's host cannot decrypt the chat.

TLS ends in this enclave
Checking.
AWS Nitro enclave
Checking.
Venice E2EE model
Checking.
Details
From the build: Venice e2ee-glm-5-3-flash, E2EE on, Venice's system prompt off, web search off, no tools. The agent's instructions, a constant of this build:
You are a helpful assistant. Answer clearly and concisely.

Verify without this page: build the verifier from the published source and run enclave-verify check https://app.0zk.ai. It fetches a fresh attestation with its own nonce and compares the certificate it is served with the attested one.

The agent can be wrong. This page cannot prove it is genuine: compare your padlock's SHA-256 fingerprints with the rail, or run enclave-verify check, before typing anything private.