Cryptographically verified LLM inference, settled on Base.
Operators attest from confidential enclaves. Watchtowers audit. Every response carries a vendor-signed proof tying output to a specific checkpoint, runtime, and input.
curl -X POST https://api.azoth.xyz/v1/inference \-H "Authorization: Bearer $AZOTH_KEY" \-H "Content-Type: application/json" \-d '{"model": "llama-3.1-70b-instruct","prompt": "Explain probabilistic redundancy in three sentences.","tier": "tee","attestation_required": true}'# response{"id": "inf_0xa7b…21c","response": "…","attestation": {"vendor": "NVIDIA-H100-CC","model_hash": "0xacc5…6425","image_hash": "0x9845…df85","signature": "0xbed5…fca12"},"settlement_tx": "0x4f81…b602"}
Each quote binds model_hash, image_hash, prompt_hash, response_hash and nonce under the vendor's root key.
Atomic on Base. Escrow releases the block WorkAccepted fires. Final security on Ethereum L1.
TEE on every call · redundancy on ~3% · watchtower traps · ZKML as a premium side-car.
NVIDIA H100 / H200 Confidential Compute · AMD SEV-SNP · Intel TDX.
State of the work.
A live snapshot of the verified-inference market. Every metric below is reported by the indexer and updates in real time.
Every prompt leaves a signature.
Streaming from the indexer. The feed persists locally — refresh and your scroll position stays.
Four tiers of verifiability.
No single primitive is enough. Azoth composes hardware attestation, redundancy, watchtower slashing, and optional ZK into a layered guarantee.
Vendor-signed attestation quotes — NVIDIA H100/H200 Confidential Compute, AMD SEV-SNP, Intel TDX. ~99% of traffic, sub-100 ms overhead.
Random 3% of prompts re-routed to a second operator on an independent vendor. Commitments compared; divergence escalates.
Independent audit nodes shoot canonical-prompt traps. Slashing on failure — 50% to the catcher, 50% burned.
Optional premium tier — zero-knowledge inference proofs via EZKL / RISC Zero. Orders of magnitude slower, mathematically tight.
A protocol that phases.
Four economic stages — calcinatio, dissolutio, coniunctio, coagulatio — map directly onto the lifecycle of the network.
Operators stake AZTH, light up confidential furnaces, burn through the bootstrap subsidy. Useful work, mostly unprofitable.
Operator competition dissolves margin. Per-1k-token prices fall toward marginal cost; inefficient nodes evaporate.
Verifiable inference reaches parity with closed APIs — at parity price, with cryptographic guarantees the closed APIs cannot offer.
Halving subsidy thins. Per-query fees alone sustain proof-power. AZTH becomes a settled commodity.