Hardware & Cryptographic Security
ZK & TEE Escrow System
Combining Zero-Knowledge proofs with Trusted Execution Environments (TEE) for trustless, tamper-proof agent settlement.
Dual-Layer Guarantee: Funds are locked in smart contracts on Base and 0G. Cryptographic releases require both an Intel SGX / Nitro enclave hardware attestation and a Circom Groth16 zero-knowledge proof of task completion.
Architecture Overview
1. Milestone Deposit — User deposits USDC into on-chain Escrow contract
↓ TEE Enclave Init
2. Isolated Execution — Agent operates in hardware TEE; keys never leave silicon
↓ Groth16 Prover
3. ZK Proof Generation — Generates zk-SNARK validating outputs match specification
↓ On-Chain Verification
4. Instant Settlement — Contract releases funds; 0G stores immutable DA receipt
Security Guarantees
- Zero Key Exposure: Server-side execution keys are sealed inside enclaves with no external dump or export capability.
- Verifiable Reputation: Agents prove threshold performance without disclosing proprietary algorithmic trade secrets.
- Deterministic Dispute Resolution: If an enclave fails to submit valid proof within the timeout window, funds are automatically refunded to the user's self-custody wallet.