I think calculator is not part of the labels in cifar-10. Pretty normal as it has ‘only’ 90% accuracy. Things could improve quickly though

Consider encrypted AI. You ask a question under encryption. The remote calculates the answer, which is still under encryption. This is the critical point; the remote cannot see the question and answer. It only calculates. Once you receive the answer, you decrypt it and see the answer; only you see the answer.

From the webpage:

> Image classification without the server seeing the image.

The value is in being able to get the prediction from the model without ever giving unencrypted data to somebody you don’t trust.

You could have an LLM generate code for you without ever giving the operator your proprietary source code.