Approve the model and code
ModelRegistry manages approved measurements with timelocked changes. Signed model and serving images allow the execution path to identify exactly what is running.
Verify the current policy
The design uses versioned measurement policies rather than permanent static pinning. Revocations and security updates must be reflected in the checks that precede secret release.
Extend the marketplace
The E3 roadmap adds attested model listings, provider stakes, fee accounting and compliance tooling. These are planned capabilities, not services offered by the current preview.
Scale confidential execution
The E4 roadmap targets multi-GPU Blackwell environments for larger models and fine-tuning inside the enclave. Deployed capacity and model availability will require separate launch disclosures.