Confidential inferencing is hosted in Confidential VMs which has a hardened and fully attested TCB. As with other software services, this TCB evolves after some time on account of upgrades and bug fixes. details exists https://tesszeoo965346.ltfblog.com/29653670/considerations-to-know-about-anti-ransomware-software-for-business