Attestra
Only on NEARsends a testnet transaction

Private AI Check

Prove a private fact with a verifiable model in a TEE.

Sign in with a NEAR wallet or a passkey to send transactions. Reads work without signing in.

Check a private fact

A pass becomes an attestation under the private AI check schema

How it works

In your browser, the evidence is encrypted to the attested key of a NEAR AI Cloud verifiable model (X25519 + XChaCha20-Poly1305). Attestra, the checker and the NEAR AI gateway cannot read it.

In the checker, the rule is added, the model is called, the model's response signature is checked and a verdict is signed. For GitHub rules the checker fetches the data itself, so the claim cannot be faked. The checker runs in one of two modes:

  • OutLayer: a component inside an OutLayer TEE, whose signing key is bound to its build.
  • Local: inside the Attestra agent, signing with a bootstrap key its operator holds.

Right now: checking the agent

On chain, verdicts.attestra.testnet checks both signatures (the checker's and the model's) and attests a pass. Only the SHA-256 of the request is stored; the evidence is never stored anywhere.

Limits: a model can be misled by text in the evidence that pretends to be instructions; rules return a strict yes or no to keep this small.

Verify the model yourself

Every answer has a NEAR AI signature you can check at the NEAR AI verification center.

cloud.near.ai/verify