It follows the same workflow as confidential inference, along with the decryption crucial is delivered to the TEEs by The true secret broker assistance at the model owner, soon after verifying the attestation studies of https://nicolasikzk706127.theisblog.com/30593119/a-review-of-ai-confidential