Trellis

The open-model gateway for @Solana.

[Trellis @TrellisSol]

Introducing Trellis.

Trellis is building the Solana-native gateway for open AI models: one API, USDC-native payments, signed receipts, and hardware-attested execution for sealed workloads.

Built on $SOL @Solana

[Trellis @TrellisSol]

Privacy is not a single toggle when providers handle data differently.

Trellis’s design makes the routing lane visible so a user can see which privacy assumptions apply.

[Trellis @TrellisSol]

Show the trust boundary before the user sends the request.

[Trellis @TrellisSol]

A receipt can explain usage and charges, but not where a prompt was processed by itself.

[Trellis @TrellisSol]

Trellis’s materials describe these lanes as a product design, not a verified live service.

[Trellis @TrellisSol]

Failover may change which provider receives the request.

[Trellis @TrellisSol]

Routing a model request also decides who can see it along the way. 🧵👇

[Trellis @TrellisSol]

Forwarding to an outside provider can introduce that provider’s own data policy.

[Trellis @TrellisSol]

Those labels only help if the actual data path matches the promise.

[Trellis @TrellisSol]

A blind lane adds a relay intended to reduce exposure of identity and network details.

[Trellis @TrellisSol]

A sealed lane is designed for supported confidential hardware and attestation.

[Trellis @TrellisSol]

An open request allows the host to see the prompt.

[Trellis @TrellisSol]

A good router makes the hidden choice visible: where the prompt goes and under what rules.

That is the design question behind Trellis’s three proposed lanes.

[Trellis @TrellisSol]

Fallback is a product decision with a privacy consequence.

If a request moves to another provider, the user needs to know whether its lane and data assumptions changed.

[Trellis @TrellisSol]

Tool output is input. It can be wrong, broken, or trying to steer the model.

Trellis only passes it into the model when the key has tools.pass_to_models enabled.

A paid tool call should not get automatic access to your prompt loop.

[Trellis @TrellisSol]

A price index can look busy when the same money keeps taking laps.

HVX uses receipts, filters self dealing and circular payments within two hops. When daily volume is below $50k, it prints THIN.

You should be able to see when a market barely exists.

Built on @solana

[Trellis @TrellisSol]

We gave the guardian the boring powers.

Pause new tabs. Turn up canary checks.

It cannot loosen controls. Parameter changes wait 24 hours. Upgrades and slashing need 3 of 5.

That is the whole job.

[Trellis @TrellisSol]

We have seen enough fake volume. We do not need fake reviews too.

Trellis writes agent feedback after a paid call, with the receipt hash and amount attached. More money at stake means more weight.

At least the review came from someone who used the thing.

[Trellis @TrellisSol]

A SEALED host cannot boot with whatever weights are handy.

Graft checks the model digest and compose hash. If they do not match, the host stays down.

A 2 of 3 multisig signs the registry. It is copied to Sigstore Rekor and the Trellis log.

@solana are you excited ?

[Trellis @TrellisSol]

https://t.co/DGnVYENf2O

[Trellis @TrellisSol]

We keep caching out of Trellis private routes.

Caching is optional on OPEN.

SEALED and BLIND do not use it.

If you choose a private route, your request goes straight through without being reused by a cache.