Private Cloud Compute expansion to Google Cloud and NVIDIA
Parent: Private Cloud Compute trust architecture and verification · Published reference · snapshot 2026-10-23 · viability 4.80 / 5 (research)
↓ Facts as markdownall context files
Source-anchored research for Private Cloud Compute expansion to Google Cloud and NVIDIA. Run status: COMPLETED.
These notes link each claim to its source. Some citations identify archived research reports that are no longer hosted on this site. A published reference means the content is available; it does not certify independent review or accuracy.Read the editorial policy and follow the sources before relying on a claim.
Structure and components
- Apple describes additional Google Cloud controls: a cryptographically verifiable append-only ledger of PCC fleet hardware; at least two independent vendor roots of trust for sensitive components; request parsing in a dedicated process and namespace; short-lived shared inference software; and attested keys in a separate confidential VM isolated from external inputs. (high confidence) [source]
How it works
- A May 22, 2026 independent study of the pre-expansion PCC reported that published binaries lacked reproducible builds and symbols. Because the study predates Apple’s June Google Cloud announcement, it does not establish whether the Google Cloud binaries have the same properties. (high confidence) [source]
Problems, failure modes and limitations
- TEE.fail researchers report extracting Intel TDX attestation keys with a physical DDR5 interposer and using extracted keys to compromise NVIDIA GPU Confidential Computing attestation in tested configurations. Apple says its Google Cloud PCC uses TDX and NVIDIA Confidential Computing, but the TEE.fail work does not evaluate PCC on Google Cloud; it is evidence of component-level risk, not a demonstrated PCC compromise. (medium confidence) [source]
Facts and statements
- Apple announced a Google Cloud expansion for selected high-demand Apple Intelligence workloads using Intel TDX CPUs, NVIDIA Confidential Computing GPUs, and Google’s Titan chip; Google identifies NVIDIA Blackwell GPUs in the Google Cloud platform, and NVIDIA independently confirms Blackwell Confidential Computing for PCC inference there. (high confidence) (verified as of 2026-06-11) [source]
- Apple says the Google Cloud extension retains PCC’s five core requirements: stateless computation, enforceable guarantees, no privileged runtime access, non-targetability, and verifiable transparency. Apple also says the Google Cloud trusted computing base includes firmware, host and guest operating systems, and application code. (high confidence) [source]
- Google says Apple and Google engineered an open-source host stack to support PCC transparency. Google’s June 2026 post announces the stack but does not identify a repository or code artifact. (low confidence) [source]
- Apple’s existing PCC transparency documentation describes a public append-only release log, binary publication, research tools, and a Virtual Research Environment. Apple’s June 2026 expansion post says Google Cloud binaries, public research tooling, and live-node access will be provided; it presents these as commitments. (medium confidence) [source]
- As of 2026-10-23, Apple’s release notes describe PCC on Google Cloud as a preview serving some requests from iOS and macOS 27 beta systems. The notes say pccvre does not yet parse Google Cloud attestations and that support will arrive with the public security research program. (high confidence) (verified as of 2026-10-23) [source]
- Apple’s general Release Transparency documentation describes client verification of attested software measurements against an append-only public log and publication of firmware and user-space binaries for inspection. Apple’s current release notes say pccvre does not yet parse Google Cloud attestations or transparency-log releases, with support planned for the public security research program. (high confidence) (verified as of 2026-10-23) [source]
- Apple’s June announcement commits to publishing Google Cloud binaries, research tooling, and access to live PCC nodes in research mode. As of 2026-10-23, Apple’s release notes still describe the Google Cloud deployment as a preview serving some requests from beta operating systems and say the public security research program is forthcoming; these statements do not report a completed public end-to-end assessment. (medium confidence) (verified as of 2026-10-23) [source]
Children
- No children recorded.