When an instance of confidential inferencing calls for access to non-public HPKE key from your KMS, Will probably be needed to create receipts within the ledger proving that the VM graphic plus the container policy https://noransomattack.com