Priced per unit. Proven per call.
Every token and every second of sandbox time lands on a signed line item you can audit without taking our invoice on faith.
Intelligence layer for autonomous agents
Inference
without witnesses.
Sableum runs your models and your sandboxes behind a sealed gateway. Billed by the unit, bounded by the key, attested on the way out — and the payload is nobody's business but yours.
LiveGatewayoperationalEnclaveattestedUptime 30d99.98%p5041ms
sableum-sealed-qwen3-32b·sealedsableum-sealed-gemma3-27b·sealedsableum-sealed-mixtral-8x7b·sealedsableum-llama-3.3-70b·opensableum-deepseek-v3·opensableum-mistral-large·opensableum-qwen-2.5-72b·opensableum-phi-4-14b·opensableum-embed-large·opensableum-rerank-v2·opensableum-sealed-qwen3-32b·sealedsableum-sealed-gemma3-27b·sealedsableum-sealed-mixtral-8x7b·sealedsableum-llama-3.3-70b·opensableum-deepseek-v3·opensableum-mistral-large·opensableum-qwen-2.5-72b·opensableum-phi-4-14b·opensableum-embed-large·opensableum-rerank-v2·open
In the catalog
The guarantee
A ceiling on every key.
Set the limit once. An agent that falls into a loop burns through its own budget and stops — not your treasury.
We keep the shape, never the substance.
Timestamps, unit counts, model ids. Your prompts and your code never touch our disks.
The route
Agent
openai-compatible
Gateway
seal · meter
Enclave
execute
Receipt
attested
A request stays wrapped from your process to ours. It is unsealed for a single execution inside the enclave, and the plaintext is discarded before the frame closes. On the sealed tier that frame runs on attested hardware the host cannot read into — live now for every sableum-sealed-* model, and provable from the receipt you get back.
Seal the stack.
Private intelligence for the agent economy.
Claim a key →