3 ms·

I think the point is to get a signed attestation that an output came from a given model, not merely sign the model.