Google TPU 8tx AI System Launches With Isolated-Data Promise but No Way to Verify It

Google’s new TPU 8tx confidential-computing AI system was unveiled with a promise of keeping sensitive data and model weights “protected and isolated even while in active use,” but the launch description does not spell out key verification elements. The write-up says Google names no remote attestation method, threat model, or independent audit that regulated buyers could use to confirm the protection. Google’s Mark Lohmeyer said the design keeps model weights, prompts and enterprise data from even the system operator, yet the announcement leaves unclear who the “operator” is when a customer runs the facility. The report explains confidential computing depends on attestation because data must be decrypted in memory, and it compares this with earlier Google disclosures around Intel TDX. Google also announced TPU 8i Max.