OPPO × Phala published a joint paper on Kubernetes Pod-level remote attestation for confidential AI.
Goal: prove the hardware, container image, and Pod identity before sensitive data enters the workload.
arxiv.org/abs/2606.03323
GLM 5.3 Flash is live on Phala—served inside a TDX-attested GPU TEE.
Private, verifiable inference for coding, long-horizon agents, visual understanding.
phala.com/models/z-ai/gl…
Umbra is now open source 🔐
Built with Phala’s confidential VMs, it gives AI agents isolated cloud environments with governed networking, policy-controlled access, and proxy-injected secrets.
Excited to see concrete security advancing secure infrastructure for autonomous
We are open sourcing Umbra, an isolated cloud environment for AI agents.
github.com/concrete-secur…
Umbra came from a internal need at Zama where we wanted to use agents across the company without giving them more access than they actually needed.
Agents can write code, install