There must be a method to provide airtight protection for the entire computation plus the point out where it runs. NVIDIA H100 GPU comes with the VBIOS (firmware) that supports all confidential computing features in https://xanderxcsy591946.illawiki.com/user