xFleet: Threshold-Unlock AI Model Deployment
Deploy AI models across device fleets with XorIDA-split weights that require K-of-N unlock. No single device holds a complete model. Tamper-evident deployment via xBoot.
The Problem
Deploying AI models to edge devices creates thousands of copies that can be extracted, reverse-engineered, or tampered with.
Edge AI is moving 80% of inference to local devices, but each device holds a complete copy of the model weights. A single device compromise exposes the entire model — months of training and millions of dollars in IP.
Current protection relies on obfuscation and TEEs, but obfuscation is reversible and TEE availability is limited on consumer hardware.
The Old Way
The PRIVATE.ME Solution
xFleet splits model weights via XorIDA across fleet devices. No single device holds a complete model. Inference requires threshold reconstruction from K cooperating devices.
Model weights are split into K-of-N XorIDA shares at deployment time. Each device receives one share. Inference requires K devices to cooperate and reconstruct the relevant layers. xBoot ensures integrity verification before reconstruction.
Deployment uses HMAC-signed manifests with per-chunk SHA-256 hashes. Tampered devices are detected and excluded from the threshold group automatically.
The New Way
How It Works
xFleet combines XorIDA model splitting with xBoot integrity verification and threshold reconstruction for secure fleet-wide AI deployment.
Use Cases
Deploy models to edge devices without any single device holding complete weights.
EdgeDistribute ADAS models across vehicle fleets with threshold reconstruction.
AutomotiveProtect quality-control AI models deployed across factory floors.
IndustrialPrevent model extraction from compromised edge devices.
IP⚡ Fast Onboarding
Traditional fleet management requires manual custodian setup, share distribution configuration, and attestation key provisioning. xFleet collapses this to 15 seconds with zero-click accept, 90 seconds with one-line CLI, and 10 minutes with deploy buttons.
Speed Tiers
| Level | Setup Time | Method | What It Does |
|---|---|---|---|
| Zero-Click | 15 seconds | Env var auto-accept | Set XFLEET_INVITE_CODE, deploy/execute on first use. No manual setup. |
| CLI | 90 seconds | One-line command | npx @private.me/xfleet init generates custodian DIDs, saves to .env, registers first vehicle. |
| Deploy Button | 10 minutes | One-click templates | Vercel/Netlify/Railway buttons provision telemetry server + share storage. |
Quick Start: Zero-Click
# 1. Set invite code (from fleet operator onboarding email) export XFLEET_INVITE_CODE='XFL-abc123' # 2. Register your first vehicle (auto-accepts invite) npx @private.me/xfleet register \ --vin '1HGBH41JXMN109186' \ --make 'Honda' \ --model 'Accord' \ --year 2021
- Invite auto-accepted from
XFLEET_INVITE_CODEenv var - Custodian DIDs generated and saved to
.env - Vehicle registered with 2-of-3 threshold
- Shares distributed to custodian endpoints
- Ready to track telemetry immediately
CLI Setup (90 seconds)
# Install CLI globally npm install -g @private.me/xfleet # Initialize (generates custodian DIDs, saves to .env) xfleet init # Register your first vehicle xfleet register \ --vin '1HGBH41JXMN109186' \ --make 'Honda' \ --model 'Accord' \ --year 2021 # Output: # ✅ Vehicle registered (2-of-3) # ✅ Shares distributed to custodians # ✅ Odometer attestation enabled # ✅ Ready to track telemetry
Deploy Button Setup (10 minutes)
Click one button to provision telemetry server + custodian share storage on Vercel/Netlify/Railway:
- Telemetry ingestion server (GPS, odometer, engine data)
- Custodian share storage (AES-256-GCM encrypted at rest)
- Driver verification dashboard
- Odometer proof generation
- Maintenance log tracking
Integration
import { FleetDeploy } from '@private.me/fleetdeploy'; const deployment = await FleetDeploy.create({ modelPath: './model-weights.bin', fleet: deviceDids, threshold: { k: 3, n: 5 } }); await deployment.distribute();
Security Properties
| Property | Mechanism | Guarantee |
|---|---|---|
| Model protection | XorIDA K-of-N split | ✓ Information-theoretic |
| Integrity | xBoot + HMAC manifest | ✓ Triple verification |
| Tamper detection | Per-chunk SHA-256 | ✓ Byte-level check |
| Deployment auth | DID + xLock push | ✓ Cryptographic gate |
Verifiable Data Protection
Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.
Read the xProve white paper →
Ready to deploy xFleet?
Talk to Ren, our AI sales engineer, or book a live demo with our team.
Ship Proofs, Not Source
xFleet generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.
- Tier 1 HMAC (~0.7KB)
- Tier 2 Commit-Reveal (~0.5KB)
- Tier 3 IT-MAC (~0.3KB)
- Tier 4 KKW ZK (~0.4KB)
Use Cases
Deployment Options
SaaS Recommended
Fully managed infrastructure. Call our REST API, we handle scaling, updates, and operations.
- Zero infrastructure setup
- Automatic updates
- 99.9% uptime SLA
- Enterprise SLA available
SDK Integration
Embed directly in your application. Runs in your codebase with full programmatic control.
npm install @private.me/fleetdeploy- TypeScript/JavaScript SDK
- Full source access
- Enterprise support available
On-Premise Upon Request
Enterprise CLI for compliance, air-gap, or data residency requirements.
- Complete data sovereignty
- Air-gap capable deployment
- Custom SLA + dedicated support
- Professional services included
Enterprise On-Premise Deployment
While xFleet is primarily delivered as SaaS or SDK, we build dedicated on-premise infrastructure for customers with:
- Regulatory mandates — HIPAA, SOX, FedRAMP, CMMC requiring self-hosted processing
- Air-gapped environments — SCIF, classified networks, offline operations
- Data residency requirements — EU GDPR, China data laws, government mandates
- Custom integration needs — Embed in proprietary platforms, specialized workflows
Includes: Enterprise CLI, Docker/Kubernetes orchestration, RBAC, audit logging, and dedicated support.