5/ How it works: • Your prompt is automatically encrypted to a key only the enclave holds • The enclave decrypts it and sends it on to the provider • The reply is encrypted back to you from the enclave • PPQ's backend gets only billing and error metadata. No content!