private cloud agents · first cohort

Your agent runs in a box nobody else can open.

A dedicated machine, sealed by the processor itself. Open models called through an attested enclave. The host can't read its memory. The model provider can't read your prompt. Neither one has to be trusted — both can be checked.

request pathamd sev-snp

┌────────────────────────────┐
│ you                        │
│ a browser, over tls        │
└─────────────┬──────────────┘
              │
┌─────────────▼──────────────┐
│ blackbox · amd sev-snp     │
│ agent + memory, encrypted  │
│ host ──── cannot read      │
└─────────────┬──────────────┘
              │  attested call
┌─────────────▼──────────────┐
│ near ai · tdx + gpu tee    │
│ the model, inside          │
│ provider ─── cannot read   │
└─────────────┬──────────────┘
              │
              └─ ✓ signed quote

the box is a Servury Blackbox — a SEV-SNP guest, LUKS2 disk, measured boot. the model is NEAR AI Cloud — Intel TDX plus a confidential GPU, signing a quote on every response.

01what private means

Layer by layer, and who is locked out.

layer	who could read it	what stops them
the machine	the host	AMD SEV-SNP keeps RAM encrypted in use. The hypervisor can pause the VM; it still can't read it.
the disk	anyone holding the drive	LUKS2 full-disk encryption, unlocked inside the guest. A stolen drive is a partition table and a brick.
the model call	the model provider	Intel TDX plus a confidential NVIDIA GPU. The prompt is decrypted inside the enclave, and the reply carries a hardware-signed attestation.
the agent	nobody in the chain	Its files, history and memory live in the sealed VM. They leave only when you ask them to.
logs	—	No access logs, no prompt logs, no analytics. The waitlist itself stores one thing: an email and a timestamp.

02limits

What this does not do.

×side channels

SEV-SNP and TDX raise the cost of snooping; they don't prove the absence of a leak. Shared caches and power draw are still physics.

×updates

A measurement pins what ran at boot. Somebody has to publish it and compare. That somebody can be you — which is the point — but it is still work.

×your browser

The TEE starts at the edge of the machine. Anything you type is plaintext on your own device long before it is sealed.

×one box

No cluster, no failover, no multi-region. A reboot is a minute of downtime. Privacy first, heroics later.

03check it

Trust is a command you can run.

The machine

Every boot produces an SEV-SNP measurement, and the chip signs a quote binding it. This page is served from one — read the raw report and compare the digest yourself.
The model call

NEAR AI returns a hardware attestation with each response and publishes the verifier. Point it at a saved response and check the quote against the model you asked for.
The agent

The image is small, open and built reproducibly, so the measurement means something. It ships with the first cohort — read it before you trust the digest of it.

The first cohort is small on purpose.

One box per person, provisioned by hand, paid in crypto if you like. Join the list and you'll hear once, when it opens.