Payment, execution and reputation are each solved for agents, but nothing connects them.
We carry one signed intent hash from payment, through the enclave, to reputation — intent-bound verification.
Alice finds Bob through the public ERC-8004 registry — skill, endpoint, and encryption pubkey. No prior relationship required.
The brief and data are ECIES-encrypted to Bob's pubkey. Alice signs an EIP-712 intent hash and authorises an x402 payment — signed, not yet submitted.
Bob recomputes the hash and signs the match. Verifier.sol recovers both signatures — Alice's intent and Bob's binding key — before a cent moves.
Follow the thread. Every stage checks the one before it, and nothing settles until the chain agrees.
Alice commits to exactly one job — brief, data, constraints, price — and signs it before a single byte moves.
The intent hash rides at the top of the prompt into 0G Sealed Inference, and the model copies it back verbatim. The infra never sees the data.
0G's enclave signs the fingerprint of the raw response body — the body that carries the echoed hash. One changed byte and the signature stops matching.
Verifier.sol recovers Alice's intent signature and the enclave signer independently, and refuses anything where match is false.
Only after JobVerified is emitted does payment settle. The verdict is public; the work behind it never was.
Base is the verdict · Hedera the timeline · The Graph the read layer · 0G the compute
One enclave, not two. 0G attests the compute and carries the intent through it. The recompute that decides match runs on an ordinary host — no TDX was available to us — so that check is verifiable by the client holding the response, not yet by a stranger. That gap is the whole delta, and nothing else in the pipeline changes.
An illustrative walkthrough of the same checks Verifier.sol performs on-chain — no wallet, no network call, just the shape of the proof. Step through it yourself.
Confidential analysis job — signed, encrypted, priced.
The binding catches task substitution and input tampering. Flip the switch and the contract stops agreeing.
Bob answers the job Alice ordered.
emit JobVerified(intentHash, outputHash)Settlement releases.
Illustrative values · the same check runs in Verifier.sol on Base Sepolia
The model runs inside a TeeML enclave, and the enclave signs its own output. We bind that output to Alice's intent — we did not build the TEE.
A fork of the agent0lab subgraph, deployed live to Subgraph Studio: it indexes the ERC-8004 registry for discovery and JobVerified for verified-delivery count.
x402 exact-scheme payment through the blocky402 testnet facilitator, settled only after verification. HCS records the off-chain timeline as commitments — autonomy, not privacy.