Google's TPU 8tx and 8i Max Split Confidential Inference From Long-Context Scale

Google adds confidential inference and dual-chip long-context systems to its TPU lineup. What changes, what remains unverified, and what to evaluate.

Google announced TPU 8tx and TPU 8i Max on November 9, expanding its eighth-generation portfolio to four systems. The additions target different constraints: protecting data during inference and supplying enough memory bandwidth for large contexts. They are new configurations of existing silicon, rather than two entirely new chip designs. Google’s announcement

For teams choosing infrastructure, that distinction is useful. A chip-generation label alone does not tell you whether a system fits your workload. The decision should start with the constraint you can measure.

Two configurations, two reasons to consider them

SystemGoogle’s designIntended workload
TPU 8txTPU 8t silicon, fifth-generation AMD EPYC hosts and the Boardfly networkConfidential inference and smaller training jobs
TPU 8i MaxTwo TPU 8i chips in one packageLarge context windows and greater rack compute density

Google says 8tx protects data and model weights while in use. For 8i Max, it reports twice the compute, SRAM and HBM bandwidth of 8i. These are vendor claims; S5 Labs has not tested either system. System details

Our Cloud Next coverage provides the earlier TPU context. This announcement calls for a workload comparison before a purchase decision.

What a long-context evaluation should measure

Our recommendation is to compare completed jobs at the same model quality, context length and concurrency. Record time to first token, generation speed, peak memory use and total cost. Repeat the comparison with short requests mixed into the queue; an infrastructure choice should survive the workload you actually serve.

Do not translate doubled bandwidth into a promise that every request finishes twice as fast. That conclusion would need a workload-specific measurement. Likewise, rack density is useful only alongside power, cooling and utilization assumptions.

For an agent application, include waiting time. A job may pause for a tool result or human review. Measure whether the infrastructure remains allocated during that pause and what resuming the job costs.

The software deserves its own evaluation

Google also announced TPU software work spanning native PyTorch support, a preview agent suite, XLA Serving Engine, idle-session management and TPU Sync for model-state movement. Cloud Pathways and GKE dynamic slicing are described as generally available. Software announcements

Those components should be assessed separately from the hardware. Before planning a migration, verify that the exact model, operations and serving path your team uses work together. Keep a known-good workload as a regression test, including output quality and failure recovery.

Questions before committing

For confidential inference, ask for the threat model: which parties and components are trusted, how attestation works, and what happens to logs, checkpoints and exported results. Hardware protection alone should not be treated as an answer to every data-handling requirement.

For either system, obtain a concrete quote and confirm regions, capacity and access dates. This article establishes the announcement and intended architecture; it does not establish an orderable configuration or measured cost advantage for your deployment.

Continue reading.

Insight10 min read

Gemini Computer Use Is GA: A Builder's Checklist Against GPT-6.1 Terra

Gemini computer_use is GA. Which model to pick, three environments, the intent field, two safety traps, and what it costs next to GPT-6.1 Terra.

Insight6 min read

Google Cloud Next '26: The Agentic Enterprise Stack, 8th-Gen TPUs, and 260 Announcements

Google Cloud Next 26: Gemini Enterprise Agent Platform, 8th-gen TPUs (3x throughput), and Agentic Data Cloud. The coherent agent stack for enterprises.

Insight10 min read

GitHub Blocks pull_request_target in Public Repos on December 2: Check Review Bots Before the November 16 Brownout

GitHub Actions blocks pull_request_target in public repos by default from December 2. What the November 16 brownout shows and how to allow one workflow.