Confidential inferencing allows verifiable safety of model IP though at the same time defending inferencing requests and responses from the model developer, service operations and the cloud supplier. for instance, https://brontelikl469618.pointblog.net/not-known-facts-about-confidential-computing-consortium-72198604