Confidential Computing Summit 2026: Full Schedule

arrow_back View All Dates

8:00am PDT

Wednesday June 24, 2026 8:00am - 9:00am PDT

1. Multi-Party Confidential RAG: Provable Safety Controls - Ryota Hashimoto, NTT
2. US Mutual Trust in the Cloud: Protecting Model IP and Customer Data with Confidential Containers - Ivan Font & Donald Hunter, Red Hat
3. Proof beats Promise: Delivering Trust in the Age of AI - Lakshmi Hanspal, DigiCert
4. Confidential AI in Practice and at Scale: From Multi-GPU Execution to Browser-Based Attestation - Felix Schuster, Edgeless Systems
5. From Firmware to AI Agents: Achieve Full-Chain Trust with dstack - Hang Yin, Phala
6. Like It or Not, AI Is Deciding: Securing Infrastructure for Autonomous Intent - Shweta Vohra, Booking.com
7. Audit, Enforce, Repeat! Seamless Confidentiality with CoCo and Kyverno - Jim Bugwadia, Nirmata & Chris Butler, Red Hat
8. Beyond Identity: Attestation as the New TLS Trust Model - Jens Albers, Fr0ntierX

Speakers

Jens Albers

CTO, Fr0ntierX

Jens Albers is CTO and Co-Founder of Fr0ntierX, where he leads development of the Polaris confidential computing platform. He serves on the Governing Board of the Confidential Computing Consortium and is a member of MITRE's working group on continuous remote attestation. His work... Read More →

Jim Bugwadia

Co-founder and CEO, Nirmata

Jim Bugwadia is a co-founder and the CEO of Nirmata, the Kubernetes policy and governance company. Jim is an active contributor in the cloud native community and currently serves as co-chair of the Kubernetes Policy and Multi-Tenancy Working Groups. Jim is also a co-creator and maintainer... Read More →

Chris Butler

Chief Architect, Red Ht

Dr. Chris Butler is a Chief Architect in the APAC Field CTO Office at Red Hat. Chris’ focus is working with regulated clients who are building infrastructure, application and AI platforms. Chris facilitates co-innovation engagements with our clients and partners with our product... Read More →

Ivan Font

Principal Software Engineer, Red Hat

Ivan Font is a Principal Software Engineer in Red Hat's CTO Office, specializing in Emerging Technologies, with a main focus on AI security. He leads the development of Private Model as a Service (PMaaS) for generative AI and contributes to the CNCF ecosystem, driving technical integration... Read More →

Lakshmi Hanspal

Chief Trust Officer, DigiCert

Lakshmi Hanspal is DigiCert’s Chief Trust Officer, leading efforts to embed trust across technology, operations, and customer experience as digital and AI ecosystems evolve. She brings 30+ years of security experience, including leadership roles at Amazon, Box, SAP Ariba, Bank of... Read More →

Ryota Hashimoto

Senior Manager, NTT

Ryota Hashimoto is a Senior Manager at NTT Software Innovation Center, where he leads the research and development of a multi-party confidential computing software product. His work focuses on multi-party trust, provable safety controls, and data sovereignty for confidential AI and... Read More →

Donald Hunter

Senior Principal Software Engineer, Red Hat

Donald is a software engineer in the Office of the CTO at Red Hat where he focuses on Linux and Openshift networking. Donald is a veteran in the network industry with over 20 years at Cisco before joining Red Hat. Donald’s recent focus has been on Zero Trust for Openshift, Netlink... Read More →

Felix Schuster

CEO, Edgeless Systems

Felix Schuster is an academic turned startup founder. After his PhD in computer security, he joined Microsoft Research to work on the foundations of Azure Confidential Computing. _x000D_
_x000D_
He founded Edgeless Systems in 2019. The company’s mission is to make confidential computing accessible to everyone, at scale and across clouds and infrastructures... Read More →

Shweta Vohra

Lead Architect, booking.com

Shweta Vohra is an Architect, Author, and Inventor with over 20 years of experience designing platforms across industries. She specialises in enterprise architecture, cloud, and AI systems, and has led global teams. She focuses on bringing clarity to complex technology. She is the... Read More →

Hang Yin

Cofounder & CTO, Phala Cloud

Hang Yin is CTO & Co-founder of Phala Cloud, with 7 years of experience in confidential computing. An ex-Googler in machine learning, he is also the creator of dstack, an open source project under the Linux Foundation. He focuses on building practical confidential computing infrastructure... Read More →

Wednesday June 24, 2026 8:00am - 9:00am PDT
Courtyard

Poster Sessions, Innovation

Audience Any

8:00am PDT

Poster Presentations: Research

Wednesday June 24, 2026 8:00am - 9:00am PDT

Courtyard

1. HaitiAidShield: Scaling Humanitarian Transparency with Confidential Computing - Vladimir Vilne, Trusted Haitian Cyber
2. Structural Privacy for Cross-Boundary AI Training for Compliant LLMs - Hina Dixit, Decompute
3. Privacy-Preserving Spatial AI: From Theory to Production - Abtin Aghagolian, Pikd
4. Achieving Hardware Root of Trust in the Real World - Yawang Wang, Google
5. Proof, Not Promises: Securing AI Inference - Hugo Huang, Canonical
6. Stop Trusting Your Kernel: Split It - Cong Wang, Multikernel Technologies
7. Minimize, Harden, Extend: Rethinking OS Design for Confidential Agents - Kailun Qin, Intel Corporation; Mona Vij, Intel Labs; and Don Porter, UNC Chapel Hill & AWS
8. Building the Trusted Agent Ecosystem - Ivan Petrov & Patrick McGrath, Google DeepMind
9. Privacy-preserving Medical AI Evaluation - Alexandros Karargyris, MLCommons
10. Standardization of Attested TLS Protocols for Confidential Computing - Muhammad Usama Sardar, TU Dresden and GA4GH
11. Trusted Execution, Broken Assumptions: Real-World Failures in TEE Attestation Systems - Rahul Saxena, Bluethroat Labs

Speakers

Abtin Aghagolian

Co-Founder & CTO, Pikd

Abtin Aghagolian is the Co-Founder and CTO of Pikd, a London-based geospatial AR platform with 10,000+ users and partnerships with Red Bull, Burger King, and the London Design Biennale. He holds a UK patent-pending invention for privacy-preserving AR using zero-knowledge proofs and... Read More →

Hina Dixit

CEO & Founder, Decompute

Hina Dixit is the Founder & CEO of Decompute, a company pioneering AI for decentralized, high-performance infrastructure. With over 15 years of experience at the forefront of venture capital, software engineering and AI innovation, Hina is a recognized leader driving the future of... Read More →

Hugo Huang

Public Cloud Alliance Director, Canonical

Hugo is an expert in Cloud Computing and Business Models, leading joint innovation between Canonical and Google. He has 20 years’ experience in Digital Transformation, including deep engagement in Open Source, Cloud Computing, 5G, AI, Cyber Security and Remote Working. He is also... Read More →

Alexandros Karargyris

Chair for Medical working group at MLCommons, MLCommons

Alexandros Karargyris is the co-chair for the Medical working group at MLCommons, a group aiming to develop best practices for benchmarking medical AI on real-world data to improve clinical translation of AI. Previously, he worked as a researcher at IBM and NIH. His research interests... Read More →

Patrick McGrath

Software Engineer, Google DeepMind

Patrick McGrath is a Software Engineer working on security and privacy at Google DeepMind. During his 5 year career at Google, he has worked on leveraging Trusted Execution Environments to enhance privacy narratives for Google Maps and Google DeepMind. He holds a bachelor's degree... Read More →

Ivan Petrov

Senior Software Engineer, Google DeepMind

Ivan Petrov is a Software Engineer at Google DeepMind who is working on security and privacy for the agentic ecosystem. He also holds a PhD from Moscow State University, where he focused on intrusion detection systems and software-defined networking.

Don Porter

Professor, UNC Chapel Hill and AWS

Don Porter is a Professor of Computer Science at the University of North Carolina at Chapel Hill and an Amazon Scholar. Porter's research interests broadly involve developing more efficient and secure computer systems. He is a maintainer of the Gramine Library OS, which was recognized... Read More →

Kailun Qin

Staff Cloud Software Engineer, Intel Corporation

Kailun Qin is a maintainer of Gramine LibOS (https://github.com/gramineproject), leading the development and innovation for its SGX and TDX backends at Intel Product Assurance and Security Group._x000D_
_x000D_
Kailun has published research in ACM (CCS, Middleware) and IEEE (SRDS, CLOUD, TDSC) and given 10+ talks at conferences including KubeCon, Cloud Native SecurityCon, IstioCon and OpenInfra Summit. He has also contributed to RISC-V CoVE and OCI specifications to help shape the future... Read More →

Muhammad Usama Sandar

Muhammad Usama Sardar, TU Dresden and GA4GH

Usama has been working at TU Dresden since October 2017. Since March 2025, he also serves as the co-chair of the Trusted Research Environment (TRE) Open Suite in The Global Alliance for Genomics and Health (GA4GH). He leads several projects in the Confidential Computing Consortium... Read More →

Rahul Saxena

Founder & Security Researcher, Bluethroat Labs

Rahul Saxena is a security researcher and founder of Bluethroat Labs, specializing in Trusted Execution Environment security and confidential computing. He previously worked on security at Matter Labs (zkSync), focusing on TEE-based execution systems. He is the author of the TEE Security... Read More →

Mona Vij

Sr. Principal Engineer, Intel Labs

Mona Vij is a security technologist and independent advisor specializing in confidential computing and AI security. She spent nearly three decades at Intel Labs, where she was one of the architects of Intel SGX and TDX — Trusted Execution Environment technologies now deployed at... Read More →

Vladimir Vilne

Lead Architect / Cybersecurity Researcher, Trusted Haitian Cyber

Vladimir Vilne is a cybersecurity researcher and Lead Architect specializing in AI-augmented governance and decentralized systems. As a Handshake AI Fellow and founder of Trusted Haitian Cyber, he develops secure infrastructure for humanitarian resilience. His recent research on decentralized... Read More →

Cong Wang

Founder and CEO, Multikernel Technologies

Cong Wang is a professional Linux kernel developer mainly focuses on Linux networking and eBPF, he is also a Linux kernel maintainer for the networking traffic control subsystem. He has contributed over 1000 patches to the Linux kernel project.

Yawang Wang

Software Engineer, Google

Yawang Wang is a Software Engineer at Google focusing in Confidential Computing._x000D_
_x000D_
His work centers on enhancing Google's Confidential Space product, where he is responsible for integrating confidential computing technologies to achieve hardware root-of-trust attestation. He is an active contributor to the open-source Trusted Execution Environment (TEE) commun... Read More →

Wednesday June 24, 2026 8:00am - 9:00am PDT
Courtyard

Poster Sessions, Research

Audience Any

8:00am PDT

Poster Presentations: Use Cases

Wednesday June 24, 2026 8:00am - 9:00am PDT

Courtyard

1. How to Test a Confidential Agent Before Production - Sachin Gupta, eBay
2. Privacy for Proprietary Code in Confidential Compute Systems - Abdulla Alwabel & Shabsi Walfish, Google
3. Phala Cloud: TEE-Native Cloud & Private Inference Platform - Hang Yin, Phala
4. From Enclaves to Intents: Making Confidential Computing Usable - Cameron Dennis
5. 3 Degrees of CC - Dan Middleton

Speakers

Abdulla Alwabel

Software Engineer, Google

Senior software engineer working at Google in confidential compute, privacy and transparency.

Cameron Dennis

Director of AI, NEAR

Cameron Dennis is Director of AI at the NEAR Foundation, where he leads strategic partnerships, technical integrations, and go-to-market initiatives for NEAR's user-owned AI infrastructure. He has been part of the NEAR ecosystem since 2020, holding roles across business development... Read More →

Sachin Gupta

Member Of Technical Staff - 2, eBay

I am a senior backend and platform engineer at eBay with over 15 years of experience building and modernizing enterprise systems. I work on large scale billing and financial platforms that demand high reliability, strong security, and precise data correctness. I spend most of my time... Read More →

Dan Middleton

Principal Software Architect, NVIDIA

Dan Middleton is a Principal Software Architect at NVIDIA, with deep experience driving innovation at the intersection of open source and emerging technologies. He has led the development and release of products spanning Computational Imaging, Blockchain, Confidential Computing, and... Read More →

Shabsi Walfish

Software Engineer, Google

Hang Yin

Cofounder & CTO, Phala Cloud

Wednesday June 24, 2026 8:00am - 9:00am PDT
Courtyard

Poster Sessions, Use Cases

Audience Any

8:00am PDT

Registration & Badge Pick-Up

Wednesday June 24, 2026 8:00am - 5:00pm PDT

Salon 3

Wednesday June 24, 2026 8:00am - 5:00pm PDT
Salon 3

Breaks / Exhibits / Special Events

8:00am PDT

Continental Breakfast

Wednesday June 24, 2026 8:00am - 9:00pm PDT

Column Ballroom

Wednesday June 24, 2026 8:00am - 9:00pm PDT
Column Ballroom

Breaks / Exhibits / Special Events

9:00am PDT

Keynote: Welcome Back - Aaron Fulkerson, Chief Executive Officer, OPAQUE

Wednesday June 24, 2026 9:00am - 9:10am PDT

Courtyard

Speakers

Aaron Fulkerson

OPAQUE, CEO

Aaron Fulkerson has built and scaled category-defining enterprise platforms around a simple principle: trust unlocks growth. As founder of MindTouch and later at ServiceNow—where he led the creation and growth of ServiceNow Impact and was part of the leadership team scaling Customer... Read More →

Wednesday June 24, 2026 9:00am - 9:10am PDT
Courtyard

Keynote Sessions

9:10am PDT

Keynote: Ivan Krstić, Head of Security Engineering + Architecture (SEAR)

Wednesday June 24, 2026 9:10am - 9:40am PDT

Courtyard

Speakers

Ivan Krstić

Head of Security Engineering+Architecture (SEAR), Apple

Wednesday June 24, 2026 9:10am - 9:40am PDT
Courtyard

Keynote Sessions

9:40am PDT

Keynote: Jason Clinton, Deputy CISO, Anthropic

Wednesday June 24, 2026 9:40am - 10:00am PDT

Courtyard

Speakers

Jason Clinton

Deputy CISO, Anthropic

Wednesday June 24, 2026 9:40am - 10:00am PDT
Courtyard

Keynote Sessions

9:55am PDT

Keynote Sessions to be Announced

Wednesday June 24, 2026 9:55am - 10:20am PDT

Courtyard

Wednesday June 24, 2026 9:55am - 10:20am PDT
Courtyard

Keynote Sessions

10:20am PDT

Coffee Break

Wednesday June 24, 2026 10:20am - 10:35am PDT

Column Ballroom

Wednesday June 24, 2026 10:20am - 10:35am PDT
Column Ballroom

Breaks / Exhibits / Special Events

10:35am PDT

Keynote: Monique Dumais, Senior Vice President & CIO, Encore Capital Group

Wednesday June 24, 2026 10:35am - 10:55am PDT

Courtyard

Speakers

Monique Dumais

CIO, Encore Capital Group

Monique Dumais joined Encore Capital Group® in 2019 and serves as Senior Vice President, Chief Information Officer for Encore Capital Group and Midland Credit Management. In this role, Ms. Dumais is responsible for enabling the business to achieve its goals by delivering strategic... Read More →

Wednesday June 24, 2026 10:35am - 10:55am PDT
Courtyard

Keynote Sessions

10:55am PDT

Keynote: Ion Stoica, Professor, UC Berkeley, Co-Founder and Executive Chairman, Databricks and Anyscale, Co-Founder and Board Member, OPAQUE

Wednesday June 24, 2026 10:55am - 11:15am PDT

Courtyard

Speakers

Ion Stoica

Professor, UC Berkeley

Ion Stoica is a Professor in the EECS Department and holds the Xu Bao Chancellor Chair at the University of California at Berkeley, the Director of Sky Computing Lab, and the Executive Chairman of Databricks and Anyscale. He is currently doing research on AI systems and cloud computing... Read More →

Wednesday June 24, 2026 10:55am - 11:15am PDT
Courtyard

Keynote Sessions

11:15am PDT

Keynote Panel Discussion: Three Forces Making Confidential AI A Mandate - Monique Dumais, Encore Capital Group; Jason Clinton, Anthropic; Ion Stoica, Professor, UC Berkeley, Databricks, Anyscale' and Additional Speakers to be Announced

Wednesday June 24, 2026 11:15am - 11:45am PDT

Courtyard

Three forces are accelerating demand for verifiable AI trust and turning Confidential AI from a should into a must. First, Mythos-class models and their successors make it probable that a malicious actor can place itself inside your environment. The agent is the attack surface. Second, current agent architectures are data-leaky. An employee touching the data is one problem. A malicious agent is another. In regulated industries, neither is acceptable. Third, new regulations require runtime proof — what ran, where, under what rules — automated, hardware-signed, third-party-verifiable. The EU AI Act Article 12 enforcement hits August 2, 2026; sovereign-AI rules across the Gulf, EU, India, and Singapore stack behind it. This panel explores what it actually takes to govern agentic AI in high-stakes environments: the architectural requirements, the compliance obligations, and the organizational shifts that make Confidential AI not just defensible, but mandatory.

Speakers

Jason Clinton

Deputy CISO, Anthropic

Monique Dumais

CIO, Encore Capital Group

Ion Stoica

Professor, UC Berkeley

Wednesday June 24, 2026 11:15am - 11:45am PDT
Courtyard

Keynote Sessions

11:45am PDT

Lunch

Wednesday June 24, 2026 11:45am - 12:45pm PDT

Column Ballroom

Wednesday June 24, 2026 11:45am - 12:45pm PDT
Column Ballroom

Breaks / Exhibits / Special Events

11:45am PDT

Poster Presentations: Innovation

Wednesday June 24, 2026 11:45am - 12:45pm PDT

Courtyard

Speakers

Ivan Font

Principal Software Engineer, Red Hat

Shweta Vohra

Lead Architect, booking.com

Felix Schuster

CEO, Edgeless Systems

Chris Butler

Chief Architect, Red Ht

Ryota Hashimoto

Senior Manager, NTT

Donald Hunter

Senior Principal Software Engineer, Red Hat

Jim Bugwadia

Co-founder and CEO, Nirmata

Jens Albers

CTO, Fr0ntierX

Hang Yin

Cofounder & CTO, Phala Cloud

Lakshmi Hanspal

Chief Trust Officer, DigiCert

Wednesday June 24, 2026 11:45am - 12:45pm PDT
Courtyard

Poster Sessions, Innovation

Audience Any

11:45am PDT

Poster Presentations: Research

Wednesday June 24, 2026 11:45am - 12:45pm PDT

Courtyard

Speakers

Abtin Aghagolian

Co-Founder & CTO, Pikd

Hina Dixit

CEO & Founder, Decompute

Hugo Huang

Public Cloud Alliance Director, Canonical

Alexandros Karargyris

Chair for Medical working group at MLCommons, MLCommons

Patrick McGrath

Software Engineer, Google DeepMind

Ivan Petrov

Senior Software Engineer, Google DeepMind

Don Porter

Professor, UNC Chapel Hill and AWS

Kailun Qin

Staff Cloud Software Engineer, Intel Corporation

Muhammad Usama Sandar

Muhammad Usama Sardar, TU Dresden and GA4GH

Rahul Saxena

Founder & Security Researcher, Bluethroat Labs

Mona Vij

Sr. Principal Engineer, Intel Labs

Vladimir Vilne

Lead Architect / Cybersecurity Researcher, Trusted Haitian Cyber

Cong Wang

Founder and CEO, Multikernel Technologies

Yawang Wang

Software Engineer, Google

Wednesday June 24, 2026 11:45am - 12:45pm PDT
Courtyard

Poster Sessions, Research

Audience Any

11:45am PDT

Poster Presentations: Use Cases

Wednesday June 24, 2026 11:45am - 12:45pm PDT

Courtyard

Speakers

Sachin Gupta

Member Of Technical Staff - 2, eBay

Abdulla Alwabel

Software Engineer, Google

Senior software engineer working at Google in confidential compute, privacy and transparency.

Hang Yin

Cofounder & CTO, Phala Cloud

Cameron Dennis

Director of AI, NEAR

Dan Middleton

Principal Software Architect, NVIDIA

Shabsi Walfish

Software Engineer, Google

Wednesday June 24, 2026 11:45am - 12:45pm PDT
Courtyard

Poster Sessions, Use Cases

Audience Any

12:45pm PDT

Characterizing NVIDIA Confidential Computing Overheads Across Model Inference & Training - Tanya Verma, Tinfoil

Wednesday June 24, 2026 12:45pm - 1:10pm PDT

Gold Ballroom

We'll walk through where NVIDIA CC overheads appear in the model inference and training pipeline across GPU architectures and try to understand why

Speakers

Tanya Verma

Cofounder, Tinfoil

Tanya is the cofounder of Tinfoil, which provides verifiably private AI. Before Tinfoil, she was a cryptography engineer at Cloudflare where she designed and deployed privacy and security protocols used by billions of users on the internet.* Speaker Email: [email protected]* Speaker Headshot: attached... Read More →

Wednesday June 24, 2026 12:45pm - 1:10pm PDT
Gold Ballroom

Breakout Sessions

12:45pm PDT

Session to be Announced

Wednesday June 24, 2026 12:45pm - 1:10pm PDT

Courtyard

Wednesday June 24, 2026 12:45pm - 1:10pm PDT
Courtyard

Breakout Sessions

1:15pm PDT

Session to be Announced

Wednesday June 24, 2026 1:15pm - 1:40pm PDT

Gold Ballroom

Wednesday June 24, 2026 1:15pm - 1:40pm PDT
Gold Ballroom

Breakout Sessions

1:15pm PDT

Session to be Announced

Wednesday June 24, 2026 1:15pm - 1:40pm PDT

Courtyard

Wednesday June 24, 2026 1:15pm - 1:40pm PDT
Courtyard

Breakout Sessions

1:45pm PDT

ACompany Session (Speaker to be Announced)

Wednesday June 24, 2026 1:45pm - 2:10pm PDT

Courtyard

Wednesday June 24, 2026 1:45pm - 2:10pm PDT
Courtyard

Breakout Sessions

1:45pm PDT

Session to be Announced

Wednesday June 24, 2026 1:45pm - 2:10pm PDT

Gold Ballroom

Wednesday June 24, 2026 1:45pm - 2:10pm PDT
Gold Ballroom

Breakout Sessions

2:15pm PDT

Panel Discussion: Speakers to be Announced

Wednesday June 24, 2026 2:15pm - 2:45pm PDT

Courtyard

Wednesday June 24, 2026 2:15pm - 2:45pm PDT
Courtyard

Breakout Sessions

2:45pm PDT

Coffee Break

Wednesday June 24, 2026 2:45pm - 3:00pm PDT

Column Ballroom

Wednesday June 24, 2026 2:45pm - 3:00pm PDT
Column Ballroom

Breaks / Exhibits / Special Events

3:00pm PDT

From Trust Assumptions To Trust Evidence: Why PKI and Confidential Computing Are Converging - Brian Trzupek, DigiCert

Wednesday June 24, 2026 3:00pm - 3:25pm PDT

Mint Ballroom

Every regulated industry runs on the same uncomfortable bargain:multi parties with conflicting interests agree to trust each other procedurally, because no tech mechanism exists to verify the claims they're making. An MRI running an AI diagnostic model involves at least 5 stakeholders:the AI vendor protecting IP, the hospital safeguarding patient data, the device mfg ensuring FW integrity, the regulator verifying the cleared algorithm is actually running, and the patient who never consented to their scan training someone else's model. Today, all of them take each other on faith. Confidential computing changes that equation from trust assumptions to trust evidence.This talk examines 2 concrete problem domains where we are applying HW-rooted attestation and PKI-based trust services to solve real, urgent problems. 1st, we walk through the brownfield medical device challenge: how do you retrofit TPM-based measured boot, model integrity verification, and remote attestation onto med. devices already deployed in the field without disrupting clinical operations? 2nd, we present DigiCert's work on AI agent ID for agentic AI systems; a problem that extends CC principles into the SW ID layer

Speakers

Brian Trzupek

Sr. Vice President Product, DigiCert

Brian Trzupek is SVP of Product at DigiCert. A crypto and security tech by day and night, Trzupek brings nearly two decades of expertise on many security subjects to the team. He is often brainstorming use cases for enterprise PKI (Public Key Infrastructure) facilitated by the industry-leading... Read More →

Wednesday June 24, 2026 3:00pm - 3:25pm PDT
Mint Ballroom

Breakout Sessions

3:00pm PDT

Global Agentic Identity and Programmable Trust: Lessons Learned From the NATO DIANA Pilot - Manu Fontaine, Hushmesh Inc.

Wednesday June 24, 2026 3:00pm - 3:25pm PDT

Gold Ballroom

NATO DIANA, NATO’s innovation accelerator, is building a heterogeneous, cross-Allied ecosystem spanning innovators, mentors, test centers, ministries of defense, and other agencies across 32 Allied nations. This is the trust problem the Internet of Agents will face at global scale: how people, organizations, and their respective agents prove identity, authority, and credentials across trust boundaries without leaking private, confidential, or national-security knowledge.
To address this challenge, DIANA sought a “chip-level zero-trust” identity infrastructure. Confidential Computing sits at the root: identity, authentication, authorization, credentialing, and key management are all unified and verified from the chips up. Each entity acts through its agent with its own cryptographic identity, trust boundary, knowledge isolation, and globally verified execution.

In this session, we will share lessons from the DIANA pilot and show why Agentic Identity is the foundational layer of Programmable Trust for the Internet of Agents: a model for sovereign ecosystems where agents interact, coordinate, and transact under hardware-backed guarantees of verifiability, confidentiality, and privacy.

Speakers

Manu Fontaine

Founder and CEO, Hushmesh Inc.

Manu Fontaine is the Founder and CEO of Hushmesh, a dual-use, early-stage, Delaware Public Benefit Corporation in the Washington DC area. Hushmesh leverages Confidential Computing technology to develop, deploy, and operate "the Mesh": the Programmable Trust infrastructure for the... Read More →

Wednesday June 24, 2026 3:00pm - 3:25pm PDT
Gold Ballroom

Breakout Sessions

3:00pm PDT

Q-Day Survival Guide: What the Post-quantum Cryptography Transition Means for Confidential Computing - Arthur Savage, Red Hat

Wednesday June 24, 2026 3:00pm - 3:25pm PDT

Courtyard

Cryptographic algorithms will one day be broken by large quantum computers, necessitating the replacement of classical cryptography (like RSA) with post-quantum cryptography (PQC). This event, called Q-day, is a rolling deadline with previous estimates falling around 2035. However, in early 2026, many groundbreaking developments rapidly shortened Q-day estimates to 2030 or sooner, leaving little time to execute this unprecedented global cryptographic overhaul.

This talk will put Q-day in context for the audience: timelines, the recent scientific breakthroughs and how they alter threat models in open source, and which gaps and blockers are most pressing. Then, we view these blockers through the lens of confidential computing, from hardware to software. We will discuss current risks and best practices, then open the audience to discussion of the needs of diverse applications across the confidential computing ecosystem. This talk is both informative and information-gathering, fostering mutual understanding and collaboration to integrate PQC before time runs out. This talk will be technical, but no prior knowledge about PQC is necessary and we welcome participation from all.

Speakers

Arthur Savage

Software Engineer, Red Hat

Arthur Savage is a software engineer at Red Hat with a passion for cybersecurity. He has a Master's degree in Electrical and Computer Engineering with specialties in data analytics, image forensics, and post quantum cryptography.

Wednesday June 24, 2026 3:00pm - 3:25pm PDT
Courtyard

Breakout Sessions

3:30pm PDT

Privacy-Preserving Fraud Intelligence for India's Open Finance Ecosystem Using TEEs - Kiran Gopinath, Sahamati Foundation & Rene Kolga, Google Cloud

Wednesday June 24, 2026 3:30pm - 3:55pm PDT

Gold Ballroom

Loan fraud in India is a $4 billion annual problem. Simultaneously, it is very hard to detect and prevent this when each lender sees only their slice of a borrower's activity. India's Open Finance framework, called Account Aggregator, establishes the foundation for coordinated fraud prevention at scale. However, lenders cannot pool raw borrower data to combat it.

Aikya, built on a Trusted Execution Environment, provides the answer by running cross-institutional velocity checks inside a secure enclave where no participant sees another's data, turning a privacy constraint into a structural guarantee.

Sahamati Foundation governs India's Open Finance framework enabling individuals and businesses to share real-time financial data across financial institutions and fintechs with their consent. With over 1,000 participating entities and tens of millions of active data flows, it is one of the largest Open Finance deployments in the world.

Speakers

Kiran Gopinath

Chief Innovation Officer and Head Sahamati Labs, Sahamati Foundation

As Chief Innovation Officer at Sahamati, Kiran leads initiatives shaping India’s Account Aggregator ecosystem, one of the world’s fastest-growing Open Finance networks and is the founder of Sahamati Labs, where he drives innovation at the intersection of AI, Open Finance. His... Read More →

Rene Kolga

Sr Product Manager, Google Cloud

Rene Kolga, CISSP, has over 15 years of cybersecurity experience in the areas of endpoint protection, insider threat, encryption and vulnerability management. Currently, he is a Product Manager at Google on the Confidential Computing team. Prior to Google, Rene worked for Symantec... Read More →

Wednesday June 24, 2026 3:30pm - 3:55pm PDT
Gold Ballroom

Breakout Sessions

3:30pm PDT

Realizing Confidential VMs Ensuring Privacy of AI Features at LY Corporation in a Real-World Cloud - LY Corporation - Hiroki Narukawa & Akihiro Misawa, LY Corporation

Wednesday June 24, 2026 3:30pm - 3:55pm PDT

Mint Ballroom

This presentation shows a real-world example of our private cloud introducing Confidential VMs based on SEV-SNP where application in container is included in trust boundary.

At LY Corporation, as part of our privacy enhancement for LINE (messaging app with 194 million active users), we provide Confidential VMs powered by AMD SEV-SNP in our private cloud. This ensures that even employees cannot access data input to AI systems, and that the data remains protected even in the event of infrastructure compromise.

This session focuses on two parts: one is mobile client perspective, the other is cloud-user perspective.

In our Confidential VM implementation, the whole system including application can be attested to the mobile clients using Attestation Report feature of SEV-SNP.

Our implementation includes SEV-SNP support in OpenStack, OVMF provisioning to ensure attestation, and our OS image to ensure that only the expected application is running. By designing the chain of trust, everything including OVMF, kernel, OS image and container image is included inside the trust boundary, while cloud users can use the common OS image.

Speakers

Akihiro Misawa

Infrastructure Engineer, LY Corporation

An infrastructure engineer at LY Corporation, working on system infrastructure. Involved in OS image management, automation, and internal tooling to support service operations at scale.

Hiroki Narukawa

Software Engineer, LY Corporation

Software Engineer in LY Corporation, working on IaaS.
Mainly developing software running inside hypervisor or Baremetal nodes. I often scope on lowlayer problems.
He work on developing software and managing version of OpenStack, qemu, libvirt. He has contributed some patches to... Read More →

Wednesday June 24, 2026 3:30pm - 3:55pm PDT
Mint Ballroom

Breakout Sessions

3:30pm PDT

WhatsApp Private Processing - Kevin Hui, Yunqi Li, Sidharth Verma, Henry Wang & Varun Patil, Meta

Wednesday June 24, 2026 3:30pm - 3:55pm PDT

Courtyard

WhatsApp (Meta) launched its flagship Confidential Computing use-case last year (https://engineering.fb.com/2025/04/29/security/whatsapp-private-processing-ai-tools/), introducing one of the first large-scale applications of confidential computing. In this presentation, we will go over an overview of how Private Processing works, the operational lessons we learned while deploying confidential virtual machines at the scale of WhatsApp, and where we think the evolution of our Private Processing stack will take us for years to come.

Topics:
- CVM hardening
- Binary transparency
- OHTTP
- Remote Attestation TLS (RA-TLS)
- Debugging CVMs in production
- Virtual Research Environment
- And others

Speakers

Kevin Hui

Software Engineer, Meta

Kevin works on the Private Compute Platform team at Meta. This team is responsible for the infrastructure surrounding Private Processing and other privacy-preserving products at Meta leveraging Trusted Execution Environments.

Kevin focuses on the build tooling and virtualization aspects of Confidential Virtual Machines, enabling developers at Meta to write privacy-first products without having to worry about the low-level details surrounding confidential computing... Read More →

Yunqi Li

Research Scientist, Meta

Yunqi works on the WhatsApp Server Privacy team, where they contribute to core messaging systems and privacy-focused technologies including Trusted Execution Environments (TEE), Binary Transparency, and Audit Transparency.

At the intersection of systems engineering and applied... Read More →

Sidharth Verma

Software Engineer, Meta

Sidharth is a Software Engineer on Meta Superintelligence Lab's Inference Service Management team. His specific focus area is TEE inference infrastructure, helping to enable the next generation of SOTA models for private inference at large scale.

Varun Patil

Research Scientist, Meta Platforms Inc

Varun is a researcher at Meta building Private Processing, WhatsApp's secure and private AI inference platform powered by trusted execution.

Henry Wang

SWE, Meta

N/A.

Wednesday June 24, 2026 3:30pm - 3:55pm PDT
Courtyard

Breakout Sessions

4:00pm PDT

A Large-Scale Data Clean Room Case Study in Japan: Confidential Computing and Privacy Regulations - ACompany (Speakers to be Announced)

Wednesday June 24, 2026 4:00pm - 4:25pm PDT

Gold Ballroom

AI model advancement demands cross-enterprise data collaboration, but strict privacy regulations create barriers. This session explores a commercialized Data Clean Room in Japan by Acompany and KDDI, a Fortune Global 500 telecom company.
We will share the architecture enabling secure data matching and privacy-preserving AI development. We detail how this satisfies the strict third-party data transfer restrictions under Japan's Act on the Protection of Personal Information (APPI). By keeping the calculation process protected, enterprises can jointly analyze sensitive large-scale datasets—including personal and location data—without exposing raw information to partners.
Furthermore, we explore the relationship between policy discussions and CC in Japan. With CC recognized as an essential data security technology in public and private sectors, we discuss the potential for market expansion. We provide insights into how bridging governance and technology creates a scalable confidential AI infrastructure.

Note: Session content is subject to minor changes.

Wednesday June 24, 2026 4:00pm - 4:25pm PDT
Gold Ballroom

Breakout Sessions

4:00pm PDT

Overview of the AWS Nitro System: Building Trust Through Secure Cloud Infrastructure - Matthew Wilson, Amazon

Wednesday June 24, 2026 4:00pm - 4:25pm PDT

Courtyard

The AWS Nitro System is the foundation for modern Amazon EC2 instances that enables AWS to innovate faster, reduce cost for customers, and deliver added benefits like increased security and new instance types. We've applied formal methods to the Nitro System since day one. AWS has reimagined our virtualization infrastructure. Traditionally, hypervisors protect physical hardware and BIOS, virtualize CPU, storage, and networking, and provide management capabilities. The Nitro System breaks apart those functions, offloads them to dedicated hardware and software, and reduces costs by delivering nearly all server resources to instances.

This session explores the architecture and security model of the Nitro System, demonstrating how offloading virtualization functions minimizes the hypervisor attack surface and enables features like secure boot and Nitro Enclaves. We'll introduce the Nitro Isolation Engine, where we've applied formal methods. Starting from proving correctness properties of early boot firmware and the API endpoint component of the Nitro Controller, the Nitro Isolation Engine is a minimal trusted computing base and is a default capability of AWS Graviton5 processors

Speakers

Matthew Wilson

Vice President/Distinguished Engineer at Amazon, Amazon

Matt Wilson is a Vice President and Distinguished Engineer at Amazon Web Services. He leads the technical architecture of the Amazon Software Development Experience (ASBX) division, which owns secure software development lifecycle tools and processes. Matt was a lead designer of the... Read More →

Wednesday June 24, 2026 4:00pm - 4:25pm PDT
Courtyard

Breakout Sessions

4:00pm PDT

Private Model as a Service: Zero-Trust Blueprint for Protecting AI Weights - Marcos Entenza, Red Hat

Wednesday June 24, 2026 4:00pm - 4:25pm PDT

Mint Ballroom

In the agentic era, deploying proprietary AI on-premises raises a critical question: how do you protect model IP when infrastructure admins have full hardware access? This session introduces Private Model as a Service (PMaaS), a production-ready reference architecture that secures AI model weights across their entire lifecycle using hardware-rooted Trusted Execution Environments (TEEs).

We dive into the technical orchestration of Confidential Containers (CoCo) and KServe to build a cryptographically verified inference pipeline with vLLM. Model weights are distributed and decrypted exclusively inside hardware-verified CPU TEEs (Intel TDX, AMD SEV-SNP) with GPU memory protection (NVIDIA H100/B200). Remote attestation via a Key Broker Service (KBS) ensures decryption keys are only released to policy-compliant, verified environments.

We also cover the challenges of running vLLM inside restricted TEEs and our work upstreaming GPU attestation logic into Kata Containers and CoCo. Attendees leave with a practical blueprint for deploying zero-trust confidential AI workloads that decouple model security from infrastructure trust.

Speakers

Marcos Entenza

Sr. Principal Product Manager, Red Hat

Marcos Entenza, a.k.a Mak, works on the core Red Hat OpenShift Container Platform for hybrid and multi-cloud environments to enable customers to run Red Hat OpenShift anywhere. Mak is an experienced Product Manager passionate about building scalable infrastructures, and he oversees... Read More →

Wednesday June 24, 2026 4:00pm - 4:25pm PDT
Mint Ballroom

Breakout Sessions

4:30pm PDT

Keynote: Closing & Wrap-Up

Wednesday June 24, 2026 4:30pm - 5:30pm PDT

Courtyard

Wednesday June 24, 2026 4:30pm - 5:30pm PDT
Courtyard

Keynote Sessions

8:00am PDT

8:00am PDT

8:00am PDT

8:00am PDT

8:00am PDT

9:00am PDT

9:10am PDT

9:40am PDT

9:55am PDT

10:20am PDT

10:35am PDT

10:55am PDT

11:15am PDT

11:45am PDT

11:45am PDT

11:45am PDT

11:45am PDT

12:45pm PDT

12:45pm PDT

1:15pm PDT

1:15pm PDT

1:45pm PDT

1:45pm PDT

2:15pm PDT

2:45pm PDT

3:00pm PDT

3:00pm PDT

3:00pm PDT

3:30pm PDT

3:30pm PDT

3:30pm PDT

4:00pm PDT

4:00pm PDT

4:00pm PDT

4:30pm PDT

Get help with the event