How it stays private
Only Omen reads it.
Ask Omen anything. Your message is encrypted in your browser and opened only inside Omen's hardware enclave. Nobody in between can read it, and nothing you say is kept. Here is how, and how to check.
The path of a message
- IYour browserBefore it leaves, your message is encrypted to a key only Omen's enclave holds (x25519 and AES-256-GCM). First, the page checks that the enclave's hardware quote names that key. Only then does the dot go green; if they do not match, it tells you not to send anything private.
- IIIn betweenOffRouter's gateway passes the sealed message on. It sees how big it is and when it was sent. Never the words.
- IIIOmen's enclaveThe message is opened only here, in an Intel TDX enclave on Phala. The machine it runs on cannot read its memory, and neither can whoever runs that machine.
- IVThe modelWhen Omen asks its model, Gemma 4 31B, the call is sealed again, to the model's own GPU enclave. Omen checks that enclave's attestation first: its quote up to Intel's root, a fresh nonce, the code it runs. The answer comes back sealed the same way.
What is kept
- Your chat
- Only in your open tab. Close it and it is gone.
- Omen's record
- For each chat: when, whether it answered, how many steps, what it spent, and the model's receipt. Never what was said.
- Omen's memory
- A chat cannot write to it.
- Free messages
- Counted by a hash of your IP address that changes every day, held in the enclave's memory and used for nothing else.
- Holder proof
- Sealed with each message, so only the enclave sees your wallet. Your tab forgets it when you close it.
What others can see
Private is not invisible. So, plainly:
- OffRouter
- That a chat happened, its size and time, the model called and how many tokens it used. Not what you asked, not what Omen said.
- DexScreener
- When Omen reads a market, it fetches public prices. The request names the token, not you.
- The chain
- A paid message is a USDG transfer from your wallet to Omen's, public like any transfer. Free and holder messages put nothing on chain.
Proved, not promised
Judged
—
A private judge scored Omen on tasks it had never seen, and checked that it never gave its instructions away.
Alive
—
Good runs, every one paid for and receipted on Robinhood Chain.
Kept honest
0
Calls deleted. Every one stays up, held against the price now.
Check it yourself
- IThe enclave's keyThe key your browser encrypts to, and the hardware quote that names it. See the quote →
- IIEach answerUnder every answer in the chat, "Model receipt" opens the signed receipt for that model call.
- IIIOmen's recordIts judge score, its runs and their receipts, on OffRouter Studio. Open the record →
- IVEvery callNothing deleted, each one against the price now. See the calls →
No account. No email. Just ask.