Back home

Solana Confidential Compute

x+web 0.93
Visit source

Intro

Solana Confidential Compute is the open-source confidential-computing toolkit the Solana Foundation and the Nito team formally launched on 13 November 2026. The official post Solana Confidential Compute: Private AI, Verified Onchain is labeled “Solana Foundation / Launch / 13 November 2026.” It describes an open-source SDK and on-chain verification program built by the Nito team in coordination with the Foundation, used to verify hardware attestations and publish a public record on Solana that applications, agents, and users can inspect. The AI computation happens off-chain; Solana holds the verification record, and publishing that record does not require publishing the conversation or the private inputs.

The official flow is: a machine inside a confidential VM generates a signing key that exists only inside that hardware; the hardware signs a report binding the key to a recent Solana slot; the on-chain program verifies the report and records the key, hardware type, and an expiry date; the machine then signs the answers it produces with that key, and anyone receiving an answer can check the signature and look up the key’s record on Solana. The product page at solana.ai/confidential-compute lists what is in the kit: a verifier program live on Solana devnet, Rust and TypeScript SDKs, helpers for other programs to consult the verifier’s record, a daemon that runs inside an enclave, plus a command-line tool and a Docker image. Supported hardware includes AWS Nitro Enclaves, AMD SEV-SNP, and Google Confidential Space. The blog also says the current SDK covers Intel TDX and AMD SEV-SNP attestations, with NVIDIA GPU attestation still in progress. Official pages stress that the toolkit is in beta on Solana devnet, the security audit is not finished, it is for development use only, and mainnet follows the audit.

The same stack is also used to demonstrate Confidential Chat (open-weight models run in confidential hardware through Tinfoil’s confidential router; the browser verifies the attestation, then encrypts the prompt to a key only the verified enclave holds; Nito’s gateway relays ciphertext without the keys to read it) and Milo, an autonomous trading agent. The product page says the in-page chat demo is simulated, and the live chat is at solana.ai/chat. @SolanaFndn posted the introduction at 2026-11-13T16:07:24Z (00:07:24 Beijing time on 14 November), pointing to https://solana.ai/ .

Key points:

Explain

Why it matters

This is a new product the Solana Foundation named on its official blog with a Launch date of 13 November 2026, and the Foundation account introduced it at 00:07:24 Beijing time on 14 November, inside this 20:32–00:32 scan window. It is described as an open-source SDK plus an on-chain verifier, not as an unnamed update to an existing product.

This page only restates the solana.ai blog, the product page, and the @SolanaFndn post. Claims about TEE attestations, the on-chain record, the devnet beta, audit status, and the Confidential Chat / Milo demos come from those sources. This page does not independently evaluate the toolkit.

Limits

Official pages say the security audit is still in progress and mainnet is not live yet, and the product page says the in-page chat demo is simulated. Do not describe Solana Confidential Compute as production-ready on mainnet, or treat Confidential Chat and Milo as separate first official product names unrelated to this toolkit. Do not describe it as the same name as earlier confidential-computing networks such as Arcium, whose Mainnet Alpha was reported around February 2026.

Usage

  1. Read the official blog at https://solana.ai/blog/nito-solana-confidential-compute , and cross-check the product page at https://solana.ai/confidential-compute , the chat page at https://solana.ai/chat , and the Foundation post at https://x.com/SolanaFndn/status/2121273734237475051 ;
  2. Per the official pages, use the current devnet beta only for development until the audit is complete, and do not describe or treat it as a mainnet production system;
  3. When citing attestation checks, the on-chain record, Intel TDX / AMD SEV-SNP / Nitro / Confidential Space support, or the Confidential Chat and Milo demos, attribute them to the 13 November 2026 official Solana Foundation materials and recheck the upstream source;
  4. Do not describe Solana Confidential Compute as already live in production on mainnet, do not describe it as Arcium, and do not treat Confidential Chat or Milo as separate first official product names; this page only restates public materials — recheck the upstream sources before citing them externally.

Advertisement