Confidential inferencing is hosted in Confidential VMs by using a hardened and totally attested TCB. As with other software service, this TCB evolves after some time resulting from updates and bug fixes.
Overview films https://chiaranxtr044004.humor-blog.com/29667805/the-best-side-of-confidential-computing-generative-ai