Reloading the page starts a new chat.

A private chat

Your messages are kept in the enclave's memory only and sent to the model encrypted. The rail shows what your browser checked.

Verify this chat

Checking in your browser.

1. This server

Checking.

2. This connection

Checking.

3. The model

Model: Venice e2ee-glm-5-3-flash, from the build. E2EE on; Venice's system prompt off; web search off; no tools.

Checking.

4. What this does not prove

The model server's code is not measured, and the encryption ends at Venice's gateway.
A reply nobody verified is not proven to come from the attested key.
The release name is the operator's claim until you rebuild.
AWS, Intel and Venice are trusted.
Who talks, when and how much is visible to us and to Venice.
The check covers this connection, not later ones or a reload.
The host sets the enclave's clock.

5. The agent's instructions

The system prompt, a constant of this build:

You are a helpful assistant. Answer clearly and concisely.

Verify without this page: build the verifier from the published source and run enclave-verify check https://app.0zk.ai. It fetches a fresh attestation with its own nonce and compares the certificate it is served with the attested one.

The agent can be wrong. Type nothing private unless the rail says this chat is verified.