re: privacy + meta. meta’s confidential computing promise (which isn’t deployed yet) only gives you the strong property if inference itself occurs inside an attested confidential boundary or the remote inference system has an equivalent privacy architecture. otherwise you’re simply sending plaintext context to meta inference endpoint which would mean meta’s inference infrastructure necessarily sees all user data in plaintext. if this is the case congratulations you built an extremely elaborate lock on the bedroom & then mailed the diary to meta every 300ms. if inference is also locked by default from training / retention i suspect as zuck points out you could make a ton of money through commerce transactions taking place which would be enough at meta scale, assuming ppl do eventually transact like crazy though agents.