It follows the same workflow as confidential inference, along with the decryption key is delivered to the TEEs by The important thing broker services on the model owner, immediately after verifying the attestation https://zoyagjrk470522.glifeblog.com/29595643/the-best-side-of-confidential-computing-generative-ai