re: privacy + meta. meta’s confidential computing promise (which isn’t deployed yet) only gives you the strong property if inference itself occurs inside an attested confidential boundary or the remote inference system has an equivalent privacy architecture. otherwise you’re simply sending plaintext context to meta inference endpoint which would mean meta’s inference infrastructure necessarily sees all user data in plaintext. if this is the case congratulations you built an extremely…