It’ll be interesting to see how far they take this cat and mouse game. Will “model attestation” become a new mechanism for enforcing tight coupling between client and inference endpoint? It could get weird, with secret shibboleths inserted into model weights…

I would be so furious if fucking LLM agents are what finally give browser attestation a foothold on our hardware.