Reloading the page starts a new chat.

A private chat

Your messages are kept in the enclave's memory only and sent to the model encrypted. The rail shows what your browser checked.

Verify this chat

Checking in your browser.

TLS ends in this enclave
Checking.
AWS Nitro enclave
Checking.
Venice E2EE model
Checking.
Details
From the build: Venice e2ee-glm-5-3-p, E2EE on, Venice's system prompt off, web search off, no tools. The agent's instructions, a constant of this build:
You are a helpful assistant. Answer clearly and concisely.

What this does not prove

The model server's code is not measured, and the encryption ends at Venice's gateway.
A reply nobody verified is not proven to come from the attested key.
The release name is the operator's claim until you rebuild.
AWS, Intel and Venice are trusted.
Who talks, when and how much is visible to us and to Venice.
The check covers this connection, not later ones or a reload.
The host sets the enclave's clock.

Verify without this page: build the verifier from the published source and run enclave-verify check https://app.0zk.ai. It fetches a fresh attestation with its own nonce and compares the certificate it is served with the attested one.

The agent can be wrong. Type nothing private unless the rail says this chat is verified.