Verifiable confidential model lanes
The TEE lane uses RedPill's key-backed gateway for model discovery, attestation reports, request signatures, and optional client-side E2EE. Chat stays on explicit user action; this page only performs read-only health and proof checks.
https://api.redpill.aiRedPill attestation on Solana
RedPill/Phala/NVIDIA checks run off-chain against the raw attestation material.
The TEE signing address is embedded in the report data and can be checked by secp256k1.
The SVM program writes one immutable proof account at seeds ['tee_proof', quote_hash].
Anyone can fetch the PDA by quote hash and inspect signer, slot, submitter, and validity.
BnoUSPTE88ebzLb74RAnTogddDMzyBPtkmKxiRoRJG4Lconst result = await verifyModel({
model: "deepseek/deepseek-v4-flash",
solana: {
rpcUrl: "https://api.devnet.solana.com",
programId: "BnoUSPTE88ebzLb74RAnTogddDMzyBPtkmKxiRoRJG4L",
},
signer: wallet,
});
console.log(result.solana?.txSig);
console.log(result.solana?.proofAddress.toBase58());web/solana-redpill-verifier/programweb/solana-redpill-verifier/clients/typescriptweb/solana-redpill-verifier/idl/solana_redpill_verifier.jsonweb/solana-redpill-verifier/svm.mdConfigured TEE models
z-ai/glm-5.2phala/qwen3.6-35b-a3b-uncensoredqwen/qwen3.5-27bdeepseek/deepseek-v4-prodeepseek/deepseek-v4-flashgoogle/gemma-4-31b-itphala/gemma-4-26b-a4b-uncensoredmoonshotai/kimi-k2.6X-Signing-AlgoX-Client-Pub-KeyX-Model-Pub-KeyX-E2EE-VersionX-E2EE-NonceX-E2EE-TimestampFetch the model public key from attestation before encrypting content.
Use version 2 nonce and timestamp headers for replay-resistant requests.
Send encrypted content to /v1/chat/completions only after user action.