Node Security

Qudata.ai follows a minimal-trust approach to host environment. Critical operations run inside VM - host cannot access task content, keys, or user data.

Platform-side isolation

• GPU is fully assigned to VM for task duration and returned to host after completion.
• Instances are launched from verified images.
• On Agent failure, resources are released automatically and node state is recovered.
• Hoster has no standard-interface access to running VM content.

Hoster responsibilities

To keep trusted-node status, hoster must:

• Keep IOMMU (VT-d / AMD-Vi) enabled in BIOS/UEFI.
• Do not install NVIDIA drivers on host - only inside VM.
• Do not interfere with Agent or running VMs.
• Do not run external workloads on GPUs assigned to platform tasks.
• Plan OS/kernel updates only when no active tasks are running.