Skip to content
InfoResearchPreprintLLM-specific

Enforcing Accountable Disclosure in Confidential AI

Published
Record updated
View JSON

Summary

CORDE is a system for confidential virtual machines that confines user-derived data by default and allows it to leave only after it is declared. A declaration records the exact contents, recipient and stated reason in a tamper-evident log that users can access. The authors combine per-user information-flow control in Rust with a TEE-based ledger and remote attestation. On an NVIDIA H100 GPU, declaring before disclosure adds about 0.5% task latency on the AppWorld agent benchmark.