Confidential AI proofs of concept: zk-Autograd and MimirLink
Two open-source research prototypes. zk-Autograd proves each optimizer step of PyTorch training with EZKL (Halo2) zk-SNARK proofs generated inside AWS Nitro Enclaves or OCI Confidential VMs. Mimir lets mutually distrustful parties run transformer inference together using SPDZ-style multi-party computation behind attested enclaves.