Anyroute 上线 SEAL 隐私推理栈与签名回执

winiam @winiam4444原推发布于 2026.10.01

在 X 上打开原推

@TryAnyroute - $ANYR - $140K 🟢 SEAL is fully shipped on Anyroute, a privacy stack for open models built on attested hardware, encrypted routing, blind payments and signed receipts. A model runs behind an attested Sidecar that measures its weights and creates its keys inside the enclave, requests are encrypted to that enclave over Tor-backed private lanes with a relay separating the sender's IP from the request path, and blind credits bought with USDG or ANYR stay in the browser with the purchase key discarded, so payment is never attached to the prompt. Every response returns a COSE_Sign1 receipt naming the model, route, attestation, policy and hashes of the request and response rather than their content, anchored onchain and hash-chained so altered or truncated output can be detected. 🟢 Anyroute introduced the Anyroute Network, opening private inference capacity to outside operators. One command sets up a SEAL host, the hardware attests what it is running, private requests route to verified capacity and hosts earn USDG for the tokens they serve. Running an enclave takes Intel TDX, an OpenAI-compatible engine with a digest-pinned Sidecar, read-only weights on the model allow-list and Docker Compose or Kubernetes, with Hopper or Blackwell in CC mode for confidential GPU claims. 🟢 Receipt v2 is live on Anyroute. Every response carries a COSE_Sign1 receipt and streams are hash-chained so a client can detect altered or truncated output, with no payer, IP address or content in the receipt and token usage bucketed. 🟢 Every Anyroute response carries a receipt disclosure label now, naming which systems processed the request, who saw the IP, how it was paid for and what was retained, recorded as hashes rather than prompt or response text. 🟢 Anyroute shipped a one-command private path for any OpenAI-compatible app. Running node private.mjs start and pointing the app at it sends calls out through Tor, pays with a blind token and routes only to attested providers, and a call fails without Tor. 🟢 Anyroute Ask is live. Documents are dropped in, file names stay in the browser with no index or file copy created, and an attested provider returns cited answers with a signed receipt holding only hashes. 🟢 Private Mode landed in the Anyroute Harness, a single switch that routes only to attested providers, shows a receipt disclosure for each reply and keeps history on the device encrypted with the user's passphrase. 🟢 A Batch API is live on Anyroute. A submitted batch takes 50% off every completed line, failed lines are not charged, each result carries its own signed receipt, and prompts are processed in memory rather than written to the Anyroute database. 🟢 Anyroute shipped Presets, a versioned configuration for a model, system prompt and settings. A preset is called with @preset/name, any two versions compared, a rollback done in one call and an exact release pinned with @preset/name@3. 🟢 Anyroute supports the Ollama API now. Pointing OLLAMA_HOST at Anyroute gives tools like Open WebUI, Continue and LangChain access to 376 models, streaming stays native, every call carries a signed receipt and the attested lane is available. 🟢 Anyroute shipped OpenTelemetry trace export. GenAI spans go to the user's own OTLP endpoint, Langfuse or Helicone, prompt content is exported only on opt-in and private-lane requests are never exported. 🟢 Anyroute added routing by speed and cost. Appending :nitro to a model picks the fastest available provider and :floor the lowest-cost one, and it supports a Cohere- and Jina-compatible rerank endpoint returning grounded scores. 🟢 Anonymous orgs are live on Anyroute. Members join with a passkey or wallet without an email, a Safe can own the org, roles cover admins, devs, viewers and agents, and every action lands in a hash-chained audit log that verifies offline. 🟢 Anyroute shipped a public status page with SLOs for its public, attested and unlinkable lanes. Private lanes are measured through privacy-preserving aggregates only, and incidents follow through Atom or RSS. 🟢 Anyroute shipped official TypeScript, Python and Go SDKs alongside LangChain and LlamaIndex integrations, covering chat, batches, rerank and presets, with every SDK able to verify receipts offline. 🟢 Anyroute added character cards. Tavern v2 or v3 cards are imported and selected with @character/<id> from SillyTavern or any OpenAI-compatible app, character memory stays sealed on the device and attested models use the attested lane where available. https://x.com/TryAnyroute/status/2105156182235062730 🧵 31/46

这条是引用着另一条写的：「Anyroute 发布 SEAL 隐私推理基础设施」