Confidential end state (proposal)

Conditional on #8916 being live in production and sign-off before implementation.

Workspace setup and workspace marks show historical designs, not current controls. The channel row mark is illustrative; the composer button is a catalogue demo control, not a product choice.

Workspace creation

Before

New workspace

AI
StandardConfidential

After

New workspace

Organisation policy

Before

Organisation policy

Require confidential for every workspace

After

Organisation policy

Workspace settings

Before

Workspace settings

Workspace mode: Normal

After

Workspace settings

Workspace policy required

Before

Workspace settings

ConfidentialYour organisation requires confidential for every workspace.

After

Workspace settings

Composer

Before

Write a message…

After

Write a message…

Personal Holoh settings

Before

Personal Holoh

Rivera’s Holoh
Skills
channel-recap
Plugins
Model
Confidential AIEncrypted before reaching the AI model.

Rivera’s Holoh uses confidential AI

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Preferred model
Auto
Hardware
AMD SEV-SNP · NVIDIA H100 CC
Fingerprint
a4f1c7…b2c3
Checked
Checked · 2026-09-15 12:00 UTC

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

After

Personal Holoh

Rivera’s Holoh
Skills
channel-recap
Plugins
Model

Rivera’s Holoh uses confidential AI

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Preferred model
Auto
Hardware
AMD SEV-SNP · NVIDIA H100 CC
Fingerprint
a4f1c7…b2c3
Checked
Checked · 2026-09-15 12:00 UTC

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

Workspace coworker settings

Before

Coworker agent

Juno
Skills
channel-recap
Plugins
Model
Confidential AIEncrypted before reaching the AI model.

Juno uses confidential AI

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Preferred model
Auto
Hardware
AMD SEV-SNP · NVIDIA H100 CC
Fingerprint
a4f1c7…b2c3
Checked
Checked · 2026-09-15 12:00 UTC

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

After

Coworker agent

Juno
Skills
channel-recap
Plugins
Model

Juno uses confidential AI

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Preferred model
Auto
Hardware
AMD SEV-SNP · NVIDIA H100 CC
Fingerprint
a4f1c7…b2c3
Checked
Checked · 2026-09-15 12:00 UTC

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

Organisation agent template

Before

Agent template

Juno
Skills
channel-recap
Plugins
Model

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

After

Agent template

Juno
Skills
channel-recap
Plugins
Model

Connectors and repositories are not set here. Each copy gets those from the workspace it joins.

Channel row

Before

# product

After

# product

Channel header

Before

# product

After

# product

Workspace header

Before

Launch

After

Launch

Workspace sidebar

Before

Launch

After

Launch

Workspace list

Before

Launch

After

Launch

Channel mark detail

Before

Confidential AI in this workspace

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Last check

If it fails, Holoh stops

Fingerprint

a4f1c7d2e8b09f3c5a6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3

After

# product

Private workspace lock

Before

Finance

After

Finance

Workspace verification

Before

Verify confidential AI
Loading checks…

After

Verify confidential AI
Loading checks…

Agent fingerprint

Before

Confidential AI in this workspace

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Last check

If it fails, Holoh stops

Fingerprint

a4f1c7d2e8b09f3c5a6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3

After

Confidential AI in this workspace

Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

Last check

If it fails, Holoh stops

Fingerprint

a4f1c7d2e8b09f3c5a6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3

Holoh proof

Before

After

Agent answer

Before

Confidential AI. Processed on sealed hardware.

After

Confidential AI. Processed on sealed hardware.

Call AI

Before

Confidential AI is present in this call.

After

Confidential AI is present in this call.

Staff availability

Before

Staff control

Confidential availability

Choose whether confidential is available for users on this stage.

Current stage

Example

Available in confidential workspaces

Recent changes

Example audit

    After

    Staff control

    Confidential availability

    Choose whether confidential is available for users on this stage.

    Current stage

    Example

    Available in confidential workspaces

    Recent changes

    Example audit

      Staff model administration

      Before

      Confidential model

      Models the sealed hardware covers right now.

      Example modelIn use

      After

      Confidential model

      Models the sealed hardware covers right now.

      Example modelIn use

      Unavailable notice

      Before

      Holoh uses confidential AI

      Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

      Preferred model
      Auto
      Status
      Service not available

      After

      Holoh uses confidential AI

      Encrypted before it reaches the model, and decrypted only inside sealed hardware. The model provider cannot read it.

      Preferred model
      Auto
      Status
      Service not available