Sealed runs inside a hardware enclave. Submissions stay unreadable — even to us — until N validated entries accumulate. Then everyone reveals at once, signed by a key that only exists inside the chip.
The asymmetry isn't between you and HR — it's between you and the four other people at your level on your team.
Levels.fyi tells you the band. It can't tell you what your two peers and the new hire actually have.
The first to share gives everything away and learns nothing. Trust collapses before anyone types.
Submissions are encrypted to a key that exists only inside an Intel TDX enclave on EigenCompute. A classifier — Qwen 2.5 3B, weights baked into the attested image — judges each one against a public rubric. Reveals are signed by the enclave; the operator can't peek, edit, or front-run.
The browser seals your disclosure to a public key derived inside the enclave. Bytes leave you encrypted.
The model decrypts, scores against the rubric, and re-seals. Verdict comes out; numbers don't.
When N submissions validate, the enclave signs the full set with its private key. Everyone unlocks together.