Confidential physics-as-a-service with honest simulation provenance.
In science platforms, the request can leak the research program. A shared simulator should not automatically learn which scenario a lab is running.
Type a physics task. Get a routed simulation, frame-by-frame output, dataset provenance, model status, and privacy-preserving retrieval.
Two-server PIR hides the selected scenario index from either single non-colluding server.
The UI refuses fake provenance. Missing route checkpoints are visible in the first viewport.
Train route-specific checkpoints, deploy non-colluding servers, harden MPC, and add audited model cards.