It follows precisely the same workflow as confidential inference, and also the decryption key is shipped to the TEEs by The real key broker services for the product owner, right after verifying the attestation reports https://gregoryioig700802.activablog.com/29824996/examine-this-report-on-prepared-for-ai-act