Prompts are AES-256-GCM sealed in your browser to a session key derived from an attested enclave. The gateway, the OS, and even TLearth staff only ever see ciphertext.
Runtime attestation
Wire payload
handshake: …
payload: plaintext
key: derived client-side, sealed to enclave measurement