Input: a Transformer written in PyTorch, and a deployment (hardware, bandwidth, round-trip time). Output: CipherFlow's plan — for every operator of the model, whether it runs in homomorphic encryption (HE) or secure multi-party computation (MPC), and where the plan converts between them or refreshes a ciphertext. Every plan shown here was computed by cipherflow.compile on the PyTorch code below.