Confidential inferencing is hosted in Confidential VMs using a hardened and completely attested TCB. just like other software assistance, this TCB evolves with time resulting from upgrades and bug fixes.
nonetheless, https://jadajwjw163101.csublogs.com/36803425/the-smart-trick-of-ai-act-schweiz-that-nobody-is-discussing