What happened
Privatemode announced a new open‑source repository, privatemode‑decisions, that provides a Python library and a sample web app for turning the GLM‑5.3‑Flash large language model into a System One‑style decision engine. The tool accepts a fixed list of options, prompts the model to output the numeric token of its chosen option, and returns the log‑probabilities for each token as a normalized probability distribution. The repository includes a benchmark comparing Privatemode Decisions with TypeSafe’s Jev and Convai’s Laya across 29 public datasets in English and German. On the 28 datasets both could answer, Privatemode Decisions and Jev performed statistically indistinguishably. The library also supports image inputs via a vision model (e.g., glm‑flash‑latest) and offers a proxy that encrypts requests and verifies attestation before forwarding them. An API key can be obtained from Privatemode’s portal, and the web app demonstrates the probability bar chart for each option.
Privatemode’s GitHub repository (https://github.com/edgelesssys/privatemode-decisions) contains a Python package named `decisions` and a Docker‑compose setup that launches a local proxy. The proxy validates the deployment’s attestation and encrypts each request before it leaves the host machine, binding to localhost to limit exposure of the API key.
The library works by prompting the model with a numbered list of options and a pre‑filled "answer:" token. The next token generated is constrained to the numeric tokens representing the options, and the server returns the log‑probabilities for each token. These are converted into a probability distribution that sums to one, giving developers a clear confidence score for each choice.
A benchmark (privatemode‑decisions‑benchmark) evaluates the approach on 29 public datasets ranging from 2 to 151 options and up to 1,000 examples per dataset. Results show that Privatemode Decisions matches the performance of TypeSafe’s Jev on the 28 overlapping datasets, while offering image input capability that Jev lacks. The benchmark methodology and raw results are publicly available in the repository.
The web app included in the repo lets users input context and questions, then visualizes the probability distribution as a bar chart. The app currently uses a single API key stored in a `.env` file; the README warns that public deployments should add authentication or rate limiting.
Why it matters
The release lowers the barrier for developers who need reliable, single‑choice predictions with calibrated confidence scores, a capability traditionally limited to proprietary systems like TypeSafe’s Jev. By leveraging GLM‑5.3‑Flash—a publicly available model—Privatemode enables cost‑effective deployment of decision‑making services without fine‑tuning or custom model training. The ability to include images expands use cases to visual and multimodal reasoning. Moreover, the open‑source nature invites community scrutiny of the benchmark methodology and encourages extensions, potentially accelerating adoption of System One‑style interfaces in enterprise workflows, automated triage, and human‑in‑the‑loop pipelines. However, the library’s security model relies on a locally‑bound proxy and a single API key; public deployments must add authentication and rate limiting to prevent key abuse.
System One‑style decision interfaces are valuable for high‑stakes applications where a single, well‑calibrated answer is required, such as medical triage, fraud detection, or content moderation. By providing an open‑source implementation that runs on a publicly accessible model, Privatemode reduces reliance on closed, expensive services.
The inclusion of image handling broadens the scope of tasks, enabling multimodal decision making without separate pipelines. This could simplify architectures for developers building end‑to‑end AI products.
Because the library does not require fine‑tuning, organizations can quickly prototype decision services without the compute cost of training, making it attractive for startups and research labs with limited resources.
The security model—local proxy with attestation—addresses concerns about data leakage, but also places operational responsibility on users to secure the proxy and manage API keys.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
In AI, what are a model's "parameters"?
What to watch next
Future updates may add support for larger option sets, dynamic option generation, or integration with other LLM providers. Watch for any announced pricing or quota changes on the Privatemode API portal, as well as community contributions that improve benchmark coverage or add new modalities. Adoption metrics—such as the number of API keys issued or third‑party integrations announced—will indicate whether the tool gains traction beyond early adopters. Finally, monitor any independent evaluations that compare the confidence calibration of Privatemode Decisions against other decision‑making frameworks.
Potential expansion of the library to support larger option sets (>151) or dynamic option generation, which would increase applicability to recommendation systems.
Changes to the Privatemode API pricing, rate limits, or quota policies that could affect scalability for enterprise users.
Community contributions that add support for other vision models or integrate with popular orchestration frameworks (e.g., LangChain, LlamaIndex).
Independent third‑party evaluations that assess confidence calibration and robustness across adversarial inputs.