When an occasion of confidential inferencing requires access to private HPKE essential within the KMS, it will be required to produce receipts through the ledger proving that the VM picture and the container policy are https://one.aistudio.ml