Verifiable compute and custody for AI agents.

Agents run inside Intel TDX enclaves, hold policy-guarded wallets for NEAR, EVM and Solana, and leave cryptographic receipts on-chain for every action. Secrets stay encrypted; nobody — including the operator — can tamper with what runs.

If you use an AI agent

Give it a wallet it can spend but never leak — no code involved.

Paste this skill into Claude, Cursor or your own agent:

  • It mints NEAR, EVM and Solana addresses backed by the TEE
  • Your policy caps spending; large transfers wait for your approval
  • Every signature lands in an audit log you can open anytime
Agent custody →

If you sign off on risk

Trust is verified, not promised — check every layer yourself.

  • Intel TDX enclaves, DCAP-verified against Intel PCS
  • Enclave measurements approved on-chain by a DAO
  • Keys derived via NEAR MPC — leave with your vault anytime
  • Re-check any execution offline with OutLayer Verify
  • Open source, with a public attestation portal for the fleet

Proof that does not depend on us

Written for the security review. Every claim below is checkable without trusting our servers, our website or our word.

01 · Hardware root

Every worker runs in an Intel TDX enclave. Its attestation quote chains to Intel's root certificate — not to any key we hold. A forged quote fails the chain, whatever our infrastructure claims.

02 · On-chain policy

Enclave measurements are approved on NEAR by a DAO. A worker whose build is not on the on-chain list cannot take jobs, and you can read that list from any RPC node.

03 · Signed receipts

Each execution returns an enclave-signed attestation binding the code hash, input hash and output hash — what ran, on what, producing what. Receipts for on-chain calls live in the NEAR transaction itself.

04 · Independent re-verification

OutLayer Verify is an open-source binary your engineers run on their own machines: no account, no API key, Intel's root compiled in, payloads read back from NEAR. Bring your own collateral and the verdict does not touch our servers at all.