
Head of Product @confidentialdot. Ex @protocollabs. Ex IBM. Rational Flâneur.
London, England
Joined October 2011
- Tweets587
- Following3K
- Followers3.1K
- Likes2.7K
End to end private inference on the most popular open weight model.
No one can see your data through the whole flow.
This is why cryptographic attestation the end user can verify is the only way. A retention policy is a promise - trusting the infrastructure provider not to look is not good enough.
If confidentiality comes with the same performance, it’s strictly better.
confidential > not confidential
KV cache offloading now gets the same gain with CC on as off. Great work @b0xtch.
Patrick retweeted
love inference? love scale? confidential AI is hiring an AI inference engineer to scale confidential computing to 8 billion people. and 800 billion agents. confidential.ai/careers/ai-i…
I had the good fortune to get a tour of the facility last month. Came away super impressed. The team at C5R are geniuses.
Patrick retweeted
Confidential Kubernetes (c8s): v0.12 to v0.33 in three weeks. Some highlights:
- env and mounts pinned at admission
- GPUs fail closed unless in CC mode
- post-quantum attested channels
- one CVM per k8s node
- sealed nodes, no shell into running workloads
github.com/confidential-dot-…
Patrick retweeted
We open-sourced confidential-inference.
The code behind api.confidential.ai: gateway, serving images, allowlist.
Every production deploy ships as a signed release bundle. Read the code, check the digests, verify the cluster.
github.com/confidential-dot-…
Open weight models are having their time - and they are a much better fit for confidential computing and inference too.
Looks like today may be a record day for token volume % of open models on Vercel AI Gateway:
🟦 Open 78.4% 🟨 Closed 21.6%
While spend 💲 usually tells a different story, #3 and #4 today are Moonshot AI & DeepSeek. Adding Z.ai, their combined spend surpasses OpenAI (#2).
(Do note that's the spend for inference of the model across providers (mostly in the US), not revenue going directly to the open weight labs.)
We're hiring at Confidential AI:
🏗️ AI Infrastructure Engineer
⚡ AI Inference Engineer
🔐 Low-Level Systems & Security Engineer
We're building end-to-end privacy for inference.
confidential.ai/careers
You can now verify a live Confidential Kubernetes (c8s) cluster from your browser.
Every check runs in your browser tab.
Attestation chains to Intel's TDX root. Firmware, kernel and rootfs match the audited image. A pinned CA proves it is the expected cluster. Nvidia GPU attestation included too.
confidential-inference-clust…















