Google Research Moves Federated Learning Into TEEs: Gboard Now Trains With Externally Verifiable Differential Privacy
Google moved Gboard federated learning into attested TEEs with externally verifiable differential privacy.
Google Research described a federated learning design that computes gradients in attested server-side trusted execution environments instead of on phones. Access policies are published to Sigstore's Rekor transparency log and binaries are reproducibly buildable, so central differential privacy can be checked externally. Gboard already uses the system for English and Japanese next-word prediction.