Tinfoil provider for omp

Use Tinfoil's verifiably-private open models from the omp coding agent. Inference runs inside hardware secure enclaves that even Tinfoil cannot read into.

Setup

1. Install the plugin:

   omp plugin install @tinfoilsh/omp-provider
   

2. Start omp and set your API key:

   /login
   

   Pick Tinfoil and paste your key from the Tinfoil dashboard. For headless use, set TINFOIL_API_KEY instead.

3. Pick a Tinfoil model with /model.

How verification works

The plugin uses the tinfoil SDK to verify the inference enclave: it checks the enclave's attestation, confirms the running code against the release digest signed in Sigstore, and binds the attested key to the live connection. Every request body is then encrypted end-to-end with HPKE, so only the verified enclave can read it.

Run /tinfoil at any time to verify again from scratch and print the verification document, with a per-step breakdown when a step failed.

The plugin also refuses to send requests while PI_REQ_DEBUG=1. That setting makes omp write request bodies to disk, and omp records them before this plugin encrypts them. Unset the variable, or set TINFOIL_ALLOW_REQ_DEBUG=1 to accept plaintext prompt logs and continue.