private-compute-services

Yeah, I should have said with rather than for. They're doing server side verification of the TEE environment using their protected download service from what I can tell. https://github.com/google/private-compute-services/tree/mast...

I took a brief look into it, and they use the Google Private Compute Services Protected Download API to download the Gemini Nano model, which uses remote attestation to cryptographically ensure that your device is running the stock ROM: https://github.com/google/private-compute-services/tree/mast... I'm not sure why they do that, tbh, since Gemini Nano is now part of Chrome, and you can download it without remote attestation. If you were dedicated enough, you could probably force the AICore system app on a rooted device into using the Gemini Nano model you downloaded from Chrome. I briefly attempted this but it proved too annoying so I gave up. Edit: It appears Pixel Screenshots works differently than Pixel Recorder, which is what I was looking into. https://news.ycombinator.com/item?id=41373011