What you show Ash is encrypted in your browser to the model's enclave — the host (even us) only ever sees ciphertext. Here's the key, and the hardware proof it's bound to, verified live below.