# Solana Foundation and Nito Release a Toolkit That Verifies Private AI Hardware on Solana

The unaudited test-network beta checks Intel and AMD attestation reports inside a Solana program, but users still have to trust the chipmakers and accept what Nito can see.

- Published: 2026-11-14T05:48:35.118Z
- Canonical: https://polylog.news/crypto/2026-11-14/solana-foundation-and-nito-release-a-toolkit-that-verifies-p
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [crypto.news](https://crypto.news/solana-confidential-compute-private-ai-nito/), [Bitcoin Magazine](https://bitcoinmagazine.com/videos/why-private-ai-is-more-important-than-ever)

The Solana Foundation has released Solana Confidential Compute, an open-source toolkit built with Nito that lets developers [build private artificial intelligence (AI) applications and verify the hardware they run on](https://crypto.news/solana-confidential-compute-private-ai-nito/). The beta runs on Solana's developer test network and has not been audited. It includes a software development kit (SDK) and an on-chain program that checks hardware attestations, [according to Solana Compass](https://solanacompass.com/news/solana-foundation-and-nito-launch-solana-confidential-compute-on-devnet-to-verify-private-ai-onchain).

The design depends on trusted execution environments (TEEs): isolated areas of a processor that sign a report describing the code running inside them. The Solana program verifies that signed report, so an application can show on-chain that a model is running inside a sealed enclave and not on an ordinary server. The beta supports [Intel's TDX and AMD's SEV-SNP enclaves](https://cryptobriefing.com/solana-foundation-confidential-compute-trynitoai/). Support for Nvidia graphics processors, where most AI inference actually runs, is still in development.

The documentation is direct about the limits. The blockchain verifies the receipt but still relies on the hardware that issued it. The application server can still see users' IP addresses. Nito can observe the account, the model, the timing of requests and the size of encrypted messages. Developers must add their own authentication, rate limiting and bot protection.

The launch adds a hardware-based option to Solana's existing privacy tools. Those include [Confidential Balances](https://solana.com/privacy), an encrypted-balance token extension with an optional auditor key, and multiparty-computation networks such as Arcium. The demand side was the subject of a Bitcoin Magazine interview with Mark Suman, chief executive of Maple AI, who [described private AI built so that even its own team cannot read users' chats](https://bitcoinmagazine.com/videos/why-private-ai-is-more-important-than-ever).

## What this means

The toolkit moves trust from the application operator to Intel and AMD, whose signing keys underlie every attestation. That is cheaper and faster than cryptographic alternatives such as multiparty computation or zero-knowledge proofs, which is why AI builders will adopt it first. It also makes two U.S. chipmakers, and the government that can compel them, the final counterparty for any user whose concern is state surveillance. The precedent is Intel's earlier enclave technology, SGX, which researchers repeatedly broke with side-channel attacks beginning with Foreshadow in 2018. Solana gains a credible pitch to enterprise AI developers. Cryptography-based privacy networks offer the stronger guarantee but cost more to operate. The desk's read is that AI-agent teams on Solana will adopt the toolkit within months for cost reasons, and that the first serious technical dispute will concern how revoked or compromised attestation keys are handled on-chain. That read is wrong if an audit finds flaws in the verification program or a new published attack breaks TDX or SEV-SNP isolation before mainnet launch.

## What to watch

- Whether the toolkit adds Nvidia graphics-processor attestation. Without it, most real AI workloads cannot use the system.
- The results of a security audit of the on-chain verification program before any mainnet deployment.
- Whether other chains or privacy networks adopt Intel and AMD attestation as their trust anchor or reject it in favor of purely cryptographic approaches.