Hmm on reflection though, your "setup" (design?) is interesting: it's obviously not theoretically pure, but it's much closer to practical today: if the web server could serve as I was waffling about above, somehow, a very high quality model, it could let an anon client use it to generate a message, pass a link to the recipient ("pass a link" means also knowing the secret key, that's already in the design so no loss), who could then anonymously go and decrypt the message from the LLM output they see... but no, this kind of setup is veering towards the "why are you doing all this instead of just passing the secret message to your recipient at the start". Meteor's main value is if you have a long series of messages you want to pass, over time, to someone you don't want to risk talking to directly more than the initial step. That's where the "receiver needs to keep their copy of the LLM" comes in.