FIELD NOTES
Notes on private AI,
from the code up.
Short pieces on how private AI works in practice: what a check proves, what a server still sees, where a promise is cryptography and where it’s policy. Each is written from Undergrove’s own code and documents, with the limits they state.
What an attestation proves, and what it doesn’t
Your browser checks Tinfoil’s enclave before it sends a word. What that check establishes, where it stops, and what can’t be checked in a browser yet.
What a relay that can’t read still sees
Our relay passes ciphertext it can’t open. That isn’t the same as seeing nothing. An inventory of what it does see, and why.
A key after the #: how shared links keep the server out
A shared conversation is stored on our server, and we can’t open it. How that works, where the password comes in, and what a link can’t protect.
Each note is dated, and describes the code as it was that day. The changelog has what changed since.