Could an AI agent run somewhere nobody can tamper with it? Not even its creators?
No server. No kill switch. Nothing to trust but consensus itself.
We spent months finding out. In one sentence: we measured, down to the metered instruction, what it costs to run an LLM inside a blockchain's consensus, pushed the software to the floor of that cost model, and got bit-identical outputs across three independent execution environments.
Here's the story, and what it opens.
Why inside consensus?
Every other way of putting AI on-chain asks you to trust something: a server (oracles), a hardware vendor (TEEs), a prover pipeline (zkML), a challenge window (optimistic rollups). We wanted the model's forward pass itself to be a consensus fact. One production network lets you measure that at useful sizes today: The Internet Computer (@dfinity), with deterministic WebAssembly and a hard budget of 40 billion instructions per call.
The wall
On-chain inference wasn't new: @onicaiHQ got llama.cpp running inside a canister first, proving an LLM could live inside deterministic consensus at all. The state of the art stood at 10 tokens per call on a 0.5B model, a number that read like a platform ceiling.
We saw an anomaly instead. Nothing about the hardware explains that number.
The dig
We profiled everything. 98.7% of the cost sits in one place: matrix multiplication. So we rebuilt that path: SIMD vectorization of the quantized inner loops.
Same weights. Same mainnet canister. Same budget.
10 → 29 tokens per call. Not a single transistor changed.
Then the pattern generalized. Decode cost collapses into one line: tok/call ≈ B / (α_eff × 2P), where B is the instruction budget, P the parameter count, and α_eff the metered instructions your kernel spends per weight operation. Calibrated on 11 models across 8 architectures, it predicts architectures it has never seen to within ~8%.
And it has a floor. Ternary weights (-1/0/+1, no multiplications) on a custom WASM kernel land at α_eff = 1.03. Our isolated kernel already benches 0.82.
≈4 → 1.4 → 1.03 → still going.
The moment
Same prompts. A local replica, the 13-node Swiss subnet, a standard ICP mainnet subnet. Two engine builds, two independent weight conversions, three months apart.
Byte-identical outputs. Empty diff.
Thirteen machines re-executed an entire neural network and agreed on every single bit. The model's output stopped being somebody's claim. It became a consensus fact.
What this opens
An agent whose *mind* runs inside the same consensus that secures the money.
Its cost: predictable from a model card. A DAO can budget years of its thinking before deploying it.
Its compute: hard-capped per action by the protocol. It cannot exceed its mandate.
Its outputs: facts that no host, no developer, no government can falsify.
Its life: it can hold assets, execute policy, and outlive the company that made it.
That's the destination, not a claim. What exists today are the primitives: predictable cost, enforced budgets, provable determinism. Measured, published, reproducible.
And what stands in the way is just as real: sub-1B model quality is THE open problem. Our failures are in the artifact too, including a ternary model that ran fast and produced garbage.
Next paper (drafted): instruction-bounded autonomy. An agent whose every action is metered, budgeted, and consensus-verified.
Check us
Paper: https://t.co/tnMc6IgHoc
Artifact: https://t.co/PDg5E6J03C
Co-author /@ORIGYNTech
Dfinity Forum: https://t.co/1rqE0jrZDu
Beat our numbers. That's what the artifact is for.
Loving my OpenClaw agent!
Also, the Internet Computer provides a very powerful way for agents to transact multi-chain
Using ICP, agents can trustlessly execute TX on other chains, and validate the results using ICP's 48-byte master chain key �� no trusted APIs necessary.
Example, an agent makes a payment using bitcoin, or stablecoins on Solana. Example, an agent automatically rebalances a portfolio of RWA assets for their human.
Quick notes on ICP chain key tech.
To this date NO other chain has mastered chain key, and none can do what's described above (some have created pale imitations that enable them to create transactions on other chains without proper safety and trustlessness — but their chains don't sign the results of every single transaction submitted to them using a single master key, which allows the interactions to be trustlessly verified).
Only ICP has a 48-byte master key that can be used to validate all interactions with the network, by validating a special signature on results.
What's so extraordinary about this feature, which sits at the core of ICP's protocol is that it scales horizontally.
That is, even as the network continues growing thanks to self-writing and cloud engines, and even if it has to process a trillion transactions a second, all the interactions with the network can be verified using the network's 48-byte master key.
For those that are wondering, of course, this doesn't involve trust, and there is no private key that can be stolen from the network — the special signatures on results are created through BFT-safe collaboration between nodes, scaled out across subnets using Merkle structures.
When you are using an app running on ICP, the frontend is automatically creating tx (essentially remote function calls into network software) for you in the background (on ICP, transactions are typically created by the frontends of hosted apps, rather than manually using traditional blockchain wallets).
Quite a lot of blockchain's are now trying to pivot to the "onchain cloud narrative," but speaking frankly, they don't know what they're talking about.
If they did, it would be possible to upload fully onchain apps to their networks! Be careful out there.
The MetaTribes website has been updated.
This marks a new chapter.
A clearer vision.
Stronger foundations.
What comes next starts now.
→ https://t.co/IAHpLuLjOB
The MetaTribes website has been updated.
This marks a new chapter.
A clearer vision.
Stronger foundations.
What comes next starts now.
→ https://t.co/IAHpLuLjOB
Couple of us mapped this out two years ago for you. I hope it all makes sense now. Applies across the board through all the clusters. Patterns never changed, just new pathways morphing with new players being added.
Community! We are happy to announce that due to the rapid growth of our project, we have launched a collaboration between XAGE and BingX.
BingX is one of the top 5 exchanges in the world and offers the best conditions for all users.
In honor of this, we have launched a promotion worth $40,000 — $30,000 from BingX for the first 1,000 users and $10,000 USDT from us for the first 500 users who complete all the tasks.
The task has already been added! Check it out here: https://t.co/JuMSArM1x2