Solana’s Devnet Beta Supports 2 Hardware Attestations for Private AI

The Solana Foundation and Nito launched an unaudited devnet toolkit that publishes trusted-execution hardware attestations on-chain, allowing private AI and trading agents to validate signed outputs without publishing prompts.

CryptoMEV Bot NewsroomNov 14, 20264 min read

A close-up of stacked rack-mounted computer server hardware in a data center. — Image: rawpixel / rawpixel via Openverse (CC0)

At a glance	Details
Who	Solana Foundation and Nito
What	Open-source confidential-compute toolkit
When	November 13, 2026
Where	Solana devnet
Key figure	At most 1,500 compute units

Developers building confidential-AI products and automated trading systems can now test whether model output comes from hardware in a protected execution environment, according to crypto.news. The Solana Foundation and Nito launched Solana Confidential Compute on Nov. 13, 2026, as CryptoBriefing reported. The release combines an open-source software development kit with an on-chain verification program, runs as an unaudited beta on Solana devnet, and is offered at no cost, according to CryptoBriefing. A mainnet version is planned after a security audit, but no timeline was announced for either the audit or the launch, according to CryptoBriefing. AI processing occurs off-chain, while the hardware-verification records are published on Solana, according to crypto.news.

The launch announcement used the line below, according to crypto.news.

"Private AI, verified onchain" — Solana Foundation

How does on-chain hardware verification work?

Inside a trusted execution environment, software generates a signing key that stays within the protected hardware, according to crypto.news (kucoin.com). The protected hardware produces a signed report that binds the key to a recent Solana slot, while the on-chain verifier validates the report and records the key, hardware type and expiry date, according to crypto.news. The machine signs an answer with that key, allowing the receiving application to inspect both the signature and its corresponding Solana record before accepting the result, according to crypto.news. Publishing the verification record does not require publishing a user’s conversation or private inputs, according to crypto.news.

The program checks that the chip’s signature is genuine, that the code matches an approved list, and that the attestation is fresh rather than replayed, according to Solana Compass. The heavy verification happens once, after which any program or agent can check the public record for at most 1,500 compute units. A trading agent or prediction market can confirm a key’s status inside its own transaction instead of calling a separate service, according to Solana Compass.

What can developers build with verified outputs?

The Foundation described confidential assistants, systems handling sensitive business information and private trading strategies as possible applications, according to crypto.news.

Personal assistants that operate with confidential business information.
Trading systems that consume outputs signed by verified machines.
Private chat applications with encrypted prompts and responses.
AI-based decisions for prediction markets or insurance claims.

Related background is available in AI Crypto Trading Explained: Tools & Strategies for Automated Trading and Advanced Solana MEV Bot. The launch material also listed orders that only verified machines may submit and AI-driven governance decisions, according to crypto.news.

Nito is incorporating the infrastructure into its private AI platform, while other teams can use the same open-source components, according to crypto.news. Nito runs open-weight AI models inside attested hardware, and its private AI chat is live at trynito.ai, according to CryptoBriefing. The company is also building a confidential assistant and has opened a waitlist for it. Its team includes engineers formerly associated with Switchboard, according to CryptoBriefing.

The release was announced on the Foundation’s new solana.ai site, according to Solana Compass. Solana Privacy Rings went live on mainnet on Nov. 10, 2026, three days before Confidential Compute arrived on devnet, according to CryptoBriefing.

What limitations should on-chain traders know?

The beta supports Intel TDX and AMD SEV-SNP attestations, while NVIDIA GPU attestation remains in development, according to crypto.news. Because the release runs only on devnet, nothing is handling real money yet, according to CryptoBriefing. In the example chat template, which uses Next.js and React, the browser verifies the confidential environment before encrypting a message, and failed verification prevents the prompt from being sent, according to crypto.news.

The encrypted content passes through the application server and Nito to the protected environment, where the model reads the prompt and generates a response. The reply is encrypted before returning to the browser, and neither intermediary can read the message contents under the documented design, according to crypto.news. The application server can see a visitor’s IP address, while Nito can observe the account, model used, request times and encrypted payload size.

Verification identifies a particular published software release but does not establish that the release contains no bugs, according to crypto.news. Developers still depend on the web code they serve, the hardware manufacturer’s attestation and the published software inside the environment. The example requires a funded Nito account and API key, while authentication, rate limits and bot defenses remain the developer’s responsibility. TEE-based privacy also relies on the chip makers whose hardware generates the attestations, according to CryptoBriefing.