Solana Confidential Compute launches private AI toolkit on devnet
The Solana Foundation and private AI startup Nito launched Solana Confidential Compute on Nov. 13, 2026, Crypto Briefing reported. The open-source toolkit is designed to help developers build private AI applications and verify their computing hardware on Solana, according to Crypto News.
According to Crypto News, the AI work is performed away from the blockchain, but applications can examine records on Solana that verify the hardware used. Those records can be published without also disclosing a user's conversation or private inputs.
The tools are an unaudited beta on Solana devnet and are intended for developers building and testing applications, according to Crypto News. A mainnet version is planned, but the announcement did not give a release date, the outlet reported.
How Solana Confidential Compute verifies hardware
The release has two main components: a software development kit and an on-chain verification program, Crypto Briefing reported. Kucoin reported that Nito is integrating the infrastructure into its private AI platform, while the open-source components are also available for reuse by other teams.
Crypto News reported that the system uses trusted execution environments, or TEEs, to keep code and data separate from the rest of the computing infrastructure, which includes the host operating system and the person operating it. Crypto Briefing described an attestation as a hardware-signed statement about what is running inside such an environment.
Inside a confidential virtual machine, software generates a signing key that stays within the protected hardware. A report signed by the hardware connects the key with a recent Solana slot. The verification program examines that report, then stores the signing key alongside the hardware type and expiration date.
According to Crypto News, the machine uses that key to sign the answer it produces. The outlet reported that an application receiving the answer can check the signature and consult the corresponding Solana record before accepting the result.
The beta supports attestations from Intel TDX and AMD SEV-SNP, while NVIDIA GPU attestation remains in development. The on-chain program also lets people see whether hardware passed a verification check, Crypto Briefing reported.
The private chat example
A developer chat template shows how Solana Confidential Compute can be used in an application built with Next.js and React, according to Crypto News. The outlet reported that the template's documentation calls for the browser to verify the confidential environment before encrypting a message to its key.
If verification fails, the prompt is not sent, Crypto News reported. In the documented flow, encrypted messages travel first through the application server and then Nito before reaching the protected environment, where a model reads the prompt and produces a response.
Replies are encrypted inside the TEE before they return to the browser. Under the documented design, neither the application server nor Nito can read the message contents, even though messages pass through both.
The encryption does not conceal every detail of a request. According to Crypto News, the template documentation says a visitor's IP address is visible to the application server; Nito can observe which account and model are used, when a request is made and how large the encrypted message is.
Developer and security limits
Crypto News reported that developers using Solana Confidential Compute continue to depend on the code in the webpages they serve, the manufacturer's hardware attestation and the published software operating within the protected environment. Crypto Briefing likewise reported that TEE privacy depends on trust in the chipmakers whose hardware produces the attestations.
Verification can identify a published software release, but it does not establish that the release contains no bugs, according to Crypto News. Kucoin reported that the process also does not guarantee the safety of the webpage code a developer serves.
Developers must implement authentication, rate limiting and bot protection themselves, and the example flow requires a funded Nito account and an API key. The Foundation has described the release as unaudited and intended for development, Crypto News reported.
Applications and mainnet plans
The Foundation has identified personal assistants, agents handling confidential business data and private trading strategies as potential applications, according to Crypto News. The outlet also reported that the announcement listed AI rulings for prediction markets or insurance claims and AI governance decisions as possibilities.
Another possibility in the announcement is trading orders accepted only from verified machines, Crypto News reported. The Foundation told developers in its X thread that they could verify a signing key's attestation status before accepting results bearing its signature, Crypto News reported.
Nito is incorporating the infrastructure into its private AI platform, while making the same open-source components available for other teams to use, according to kucoin. Crypto Briefing reported that Nito runs open-weight AI models inside attested hardware to allow end-to-end encrypted interactions.
For Solana Confidential Compute, the next planned network release is mainnet. Crypto Briefing reported that it is expected after a security audit, with no timeline provided for either the audit or the launch.
Conclusion
The Solana Foundation and Nito have released an open-source toolkit that combines private AI processing with hardware verification on Solana, according to Crypto News. The processing happens off-chain, and a verification record can be published without exposing a user's private inputs. The release is unaudited and intended for development, the outlet reported. A mainnet version is planned, with Crypto Briefing reporting that it is expected after a security audit. No timeline has been given for the audit or the launch, according to Crypto Briefing.
Frequently Asked Questions
When did Solana Confidential Compute launch, and where is it available?
The Solana Foundation and Nito launched Solana Confidential Compute on Nov. 13, 2026, Crypto Briefing reported. According to Crypto News, the toolkit is an unaudited beta on Solana devnet for developers building and testing applications. A mainnet release is planned, but no date has been announced.
Which hardware does Solana Confidential Compute support?
Intel TDX and AMD SEV-SNP are covered by the beta; work on NVIDIA GPU verification has not finished. The system checks a hardware-signed report that ties a key to a recent Solana slot, then records the key, hardware type and expiration date on-chain.
What can Nito and application servers see in Solana's AI chat template?
The documented design keeps message contents unreadable to both intermediaries. Crypto News reported that Nito can observe which model and account are used, the time of a request and the size of its encrypted message. The application server, meanwhile, can view the visitor's IP address.
When will Solana Confidential Compute reach mainnet?
Crypto News reported that a mainnet version is planned but has not been assigned a release date. The toolkit is currently on devnet in a beta intended for developers building and testing applications. It has not yet been audited, according to the outlet. Crypto Briefing said an audit is expected to precede the launch, but neither has a timetable.