When an instance of confidential inferencing demands access to private HPKE key through the KMS, It will likely be required to deliver receipts within the ledger proving the VM impression along with the container plan https://one.aistudio.ml