Anyroute ships SEAL private inference infrastructure for open models
SEAL combines attested sidecars, encrypted transport, anonymous credits and on-chain receipt records to make open-model calls verifiable and traceable without exposing user identity.
SEAL is fully shipped. $ANYR Anyroute SEAL is private, verifiable infrastructure for open and uncensored models. It is built around four parts: S: Sidecar The model runs behind an attested Sidecar. The hardware proves the environment, the model weights are measured, keys are created inside the enclave, and every response can be tied back to that record. E: Encrypted transport Your request is encrypted to the enclave. A relay separates your IP from the request path, so the operator handling the model does not need to know who sent it. A: Anonymous credits Payment and prompting are separated. Blind credits let a request be paid for without attaching the payer’s identity to the prompt or the receipt. L: Ledger of receipts Every response returns a signed receipt. It records the model, route, attestation, policy, and hashes of the request and response, not the content itself. Streams are hash-chained, so altered or cut output can be detected. Receipt records are anchored on-chain for verification. SEAL also makes policy visible. If filtering is enabled, the policy is measured inside the enclave and named in the receipt. No hidden changes after the fact. Builders can use it with OpenAI-compatible model servers, Claude Code, Codex, the OpenAI Agents SDK, Saved Routes, Batch Studio, and private RAG. The point is not to ask users to trust a privacy policy. The point is to show what ran, where the request went, what was retained, who could see what, and give the user a receipt they can verify themselves.