Receipts and Proof

​

The Receipt

Every reply carries a Receipt: the model that answered, the privacy level, prompt and completion token counts, reasoning tokens where they apply, and how much of the context window the prompt used. The receipt never contains your prompt or the reply. Copy with receipt copies the reply followed by that summary as plain text.

​

The Attestation Report

On a Confidential or Encrypted model the reply also carries an Attestation Report: the model, the level, the proof format, the signature type, the hardware address that signed the proof, the model key, and the one-time code bound to this reply. The report states what Nito confirmed before showing the reply: that the sealed hardware returned evidence, and that the evidence names the provider and model that ran the call and carries the one-time code for this request. Nito does not verify the hardware quote, the certificate chain, or the platform policy. That verification is yours, and the report gives you the material. See How Attestation Works.

​

Verify It Yourself

Expand Verify it yourself on the report.

• Raw Evidence is the complete attestation response. Download proof saves it as JSON; Copy proof copies it.
• GPU Attestation Evidence appears when the evidence includes a GPU payload, with a command for the GPU maker’s remote attestation service.
• The CPU evidence panel appears when the evidence includes a CPU quote, with links to the vendor’s documentation and the full quote in the JSON download.

The full recipe: Verify It Yourself.

​

Sharing Proof

Share proof digest copies a public link whose fragment carries a proof-only receipt: metadata plus a digest of the attestation envelope. It never carries the prompt, the reply, the raw proof, or signing identities.

​

Restored Replies

A reopened chat shows Verified when sent: Nito’s binding checks passed when the reply was sent, and the stored copy is not re-checked. The hardware evidence itself is yours to verify, then as now. Proof is kept inside the encrypted chat record within a size budget. If a proof did not fit, the report says so.

​

Fusion Reports

A Confidential or Encrypted Fusion shows one consolidated Fusion attestation after the cards, with per-model rows. Anonymous and Private Fusions show no report.

​

Tune Persona

Tune Persona in the reply actions turns what you wanted different into durable preferences for the active persona, without copying the reply or your feedback into it. See Workbench.

​

Next