It follows exactly the same workflow as confidential inference, as well as decryption crucial is shipped to the TEEs by The true secret broker service for the product owner, immediately after verifying the attestation https://asiyacfat291529.blogdon.net/the-smart-trick-of-ai-act-schweiz-that-nobody-is-discussing-46465887