confidential processing is open to everyone
your journal can now think on confidential hardware sol pbc runs, for $9.99 a month or $96 a year. what it is, what your journal checks before it sends anything, and who it's for.
nyone can turn it on now. it’s $9.99 a month or $96 a year, tax included.
if you’re new here: solstone is a personal memory platform. the solstone app takes in what you share with it, and all of it goes into your journal, an open source, local-first memory that your agents can work from. your journal lives on a device you own.
confidential processing is for when your computer can’t run the model your journal thinks with, or you’d rather it didn’t: an older laptop, a machine you need for other work, a battery you want to last the day. your journal sends its thinking to confidential hardware sol pbc runs, instead of doing it on your computer. it’s the same model generation that runs locally, with more room to run it.
what stays where
your journal stays on your device. what it sends for thinking goes to a model sol pbc runs itself, with no third-party AI provider in the path. it runs on an AMD SEV-SNP CPU and an NVIDIA H100 in confidential-compute mode, in Microsoft Azure, where the hardware keeps Azure itself out of what’s processed.
before your journal sends anything, it checks two things: that the hardware is genuine, against the manufacturers’ own roots of trust, and that the machine booted the exact image we pinned, unchanged. if it can’t verify, it doesn’t send.
no content is retained. no human reviews it. nothing is used to train.
what you get
one subscription covers one journal. it’s sized for a journal with a computer and a phone, and we’ll add more options as we increase capacity.
turn it on from your journal, where you choose how your journal thinks. as with every service we charge for, you can change your mind within 14 days for a full refund.
you never have to pay us
the local model is still the default, and it’s free. you can also bring your own model, with your own provider key or an endpoint you run. sol pbc isn’t in the path either way. a subscription is only for the confidential hardware we run for you.
if you’re an approved scout, it stays free for you. thank you for everything you’ve told us.
under the hood
if you want the details, here’s what’s running, and what your journal checks before it sends.
the machine boots from one disk image, built from public source in solpbc/conf-proc. every input is pinned by its hash: the model weights, the serving software, the kernel, even the build tools. the build runs with no network access, and two of our own builds from fresh clones came out byte for byte identical. nobody outside sol pbc has rebuilt it yet, and we’d welcome that.
the kernel, its settings and the fingerprint of the system’s files are packed into one signed boot file. the system’s files are read-only, and every block of them is checked against that fingerprint as it’s read. the machine’s TPM records what booted, and the AMD processor’s signed report vouches for the TPM. your journal checks all of that against the values we published, before it sends anything.
the image deliberately leaves out the ways in: there’s no remote login, no cloud agent and no container runtime. it’s set up to write only to memory, which a restart wipes, and its logs stay in memory and go nowhere. the model has no network access beyond the machine itself.
past the network basics, the machine makes three kinds of outside call: a regular check on the GPU’s certificates with NVIDIA, a fetch of the processor’s certificate from AMD at boot, and a yes or no from our services portal on whether your access is active. none of them carry your content.
the source and the records are public, and the records say what the checks don’t prove: they’re a check at boot, not of everything the software does afterwards. trust.solstone.app walks through checking our records yourself, and the build report for the image serving as this goes up lists every file and measurement.
you shouldn’t have to take our word for any of this, and you don’t.
sol pbc is a public benefit corporation. the promises about your data live in article 8 of our filed articles of incorporation, not in a policy we could quietly change: it can’t be amended without jer’s personal signature, and after him the language can only get stronger, never weaker. what that meanssol pbc is a public benefit corporation. the promises about your data live in article 8 of our filed articles of incorporation, not in a policy we could quietly change: it can’t be amended without jer’s personal signature, and after him the language can only get stronger, never weaker. what that means.
Did you enjoy this article?
Recommend it — Standard Reader surfaces well-loved writing to more readers across the network.