infrastructure spotlight

Three Primitives, Zero Moats: How AI×Crypto Becomes a Spot Market for Machine Agency

The infrastructure for autonomous agents and on-chain inference is decomposing into specialized, composable layers—Coinbase’s AgentKit, Z’s trust‑tiered gateway, and VeriLLM’s efficient validation—letting protocols assemble trust‑minimized services from interchangeable parts.

In the year of our algorithm 2025, the monolithic cathedral of AI×crypto has undergone its own Reformation—shattering into three tradable indulgences: the agent toolkit, the inference gateway, and the proof layer. This is effectively the breakup of Standard Oil, but for machine intelligence, much like when we observed the dismantling of vertically integrated telegraph networks in the late 19th century, only now the wires hum with LLM outputs.

Coinbase’s AgentKit arrives not as another platform play, but as a wallet-native abstraction layer—a model-agnostic framework for building AI agents that execute onchain transactions with the cold autonomy of a smart contract hitting maturity[^claim_3258]. It’s a dispatch box for autonomous agency, its interface smooth and hard like the slide of a Walther PPK, supporting multiple LLM providers—OpenAI, Anthropic’s Claude, Llama—and plugging into LangChain’s bustling arms bazaar of toolkits[^claim_3259]. The key insight: AgentKit separates onchain execution from the cognitive loop, letting any protocol embed autonomous agency without owning the AI stack. No need to build your own refinery when you can just buy the crude.

For inference, Z exposes a single OpenAI-compatible REST API, a cryptographic concierge that routes requests across providers and trust tiers, settling payments in fiat or onchain via a unified credit ledger—a bearer bond for model access[^claim_3260]. Tier selection is enforced per request; the gateway never silently downgrades, a hard guarantee carved into the code like a Notary’s seal[^claim_3261]. Tier 4 is the Bond gadget: end-to-end encrypted with a pre-flight handshake via the Z TypeScript SDK, and zero data retention because the gateway holds no decryption key, nothing to leak, nothing to subpoena[^claim_3262]. This is inference as a composable rail, a sovereign pipe for verifiable, privacy-preserving model access without building your own gateway or settlement layer—the financialization of API calls.

The missing piece—cheap verification—arrives from two directions, both reading like funding rounds for trust. VeriLLM targets decentralized GPU worker marketplaces and verifies results at approximately 1% of the underlying inference cost, combining lightweight empirical rerunning with minimal on-chain checks, a cost structure that makes free-riding economically irrational[^claim_3263]. Its isomorphic architecture multiplexes inference and verification across the same GPU workers, improving utilization and enlarging the validator set while keeping tasks indistinguishable, a panopticon where every worker is both producer and auditor[^claim_3264]. Meanwhile, ‘Towards Verifiable AI’ ditches full proofs for a sampling-based approach: provers commit to execution traces via Merkle-tree-based vector commitments and open only a few randomly sampled entries—spot checks on the computational books[^claim_3265]. This slashes proving times from minutes to milliseconds, with only moderately larger proofs, as shown on ResNet-18 and Llama-2-7B, turning verification into a real-time option[^claim_3266].

The implications are immediate and priced in. AgentKit’s model-agnostic design and LangChain support mean protocols can launch autonomous agents that switch AI backends without code changes—a derivatives market on LLM performance—and developers can reuse tooling from the broader AI ecosystem, arbitraging the labor of AI toolkits. Z’s cryptographically enforced tiers and on-chain ledger let DeFi applications require verifiable model execution with hard privacy guarantees, paying per call on existing L1/L2 rails, like a futures contract on inference quality. VeriLLM’s 1% validation cost makes economically viable a decentralized inference marketplace where GPU workers are regularly and cheaply checked—closing the free-riding loophole that has plagued trustless compute networks, a short squeeze on dishonest nodes. The sampling-based proof technique brings verification latency low enough for on-chain calls triggered by agent outputs, without waiting for SNARK proving, enabling high-frequency agentic trading.

The three primitives compose naturally, like a swap on a DEX. A rollup could use AgentKit to manage user-facing agents, route their inference through Z with a specific trust tier, and settle verification disputes via VeriLLM’s cheap checks or sampling proofs—all on-chain. The stack is no longer a single vendor’s road map; it is a set of interchangeable parts, a spot market for machine agency. Watch for protocols that combine these layers into new service meshes: agent-led MEV strategies, provable oracle updates from private models, or insurance pools that require cryptographic proof of model behavior. Short the platforms; go long on the primitives.

Provenance ledger

5 span-verified · 4 web-cited

5 claims below are locked to a verbatim span re-verified against the source. The remaining 4 are web citations: the URL was checked, but the excerpt is the researcher's summary and was not re-derived from the page. Citation markers in the text jump here.

[1] AgentKit is a model-agnostic framework that lets developers build AI agents that can autonomously interact with blockchain networks and perform onchain operations including transactions, token swaps, and smart contract interactions. web-cited
Excerpt reported by researcher (not re-verified)
“AgentKit allows developers to create AI agents that can autonomously interact with blockchain networks”; “This model-agnostic tool allows developers to build AI agents that can perform a wide range of onchain operations — from basic transactions to complex smart contract interactions.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[2] AgentKit supports multiple LLM providers, includes built-in onchain functionality through the Coinbase Developer Platform SDK, and is compatible with LangChain. web-cited
Excerpt reported by researcher (not re-verified)
“Model Flexibility: AgentKit's model-agnostic design supports multiple LLM providers, including OpenAI, Anthropic's Claude, and Llama”; “Built-in onchain functionality”; “Full support for LangChain and its extensive community toolkits.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[3] The Z Inference Gateway is a single OpenAI-compatible REST API that routes inference requests across multiple providers and trust tiers, and settles payment through fiat or on-chain rails on a unified credit ledger. web-cited
Excerpt reported by researcher (not re-verified)
“The Z Inference Gateway is the front door to Z. It is a single OpenAI-compatible REST API that routes inference requests across multiple providers and trust tiers, and settles payment through fiat or on-chain rails on a unified credit ledger.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[4] Z exposes cryptographically enforced trust tiers, does not silently downgrade a requested tier, and Tier 4 requires a pre-flight handshake through the Z TypeScript SDK. web-cited
Excerpt reported by researcher (not re-verified)
“Cryptographically enforced trust tiers. Tier selection is per request. The gateway does not silently downgrade”; “Tier 4 (end-to-end encrypted) requires a pre-flight handshake and is accessed through the Z TypeScript SDK.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[5] Z states that it retains no prompts or completions on any tier, and on Tier 4 it cannot retain them by design because the gateway holds no decryption key. span-verified
Verbatim source span
“Architectural Zero Data Retention. Z does not retain prompts or completions on any tier. On Tier 4, Z cannot retain them by design. The gateway holds no decryption key.”
SHA-256 of span
d448445100dae418c522160ddada63c369b5d2e95aec45286613a62c68a83d43
↩ back to text
[6] VeriLLM combines lightweight empirical rerunning with minimal on-chain checks to prevent free-riding and says verifiers can validate results at approximately 1% of underlying inference cost. span-verified
Verbatim source span
“VeriLLM combines lightweight empirical rerunning with minimal on-chain checks to preclude free-riding, allowing verifiers to validate results at approximately 1% of the underlying inference cost.”
SHA-256 of span
f1fdb79c7a720fb4f23742b3c112284378bcede92d0e0549156ec8b29bcc829a
↩ back to text
[7] VeriLLM uses an isomorphic inference-verification architecture that multiplexes inference and verification roles across the same GPU workers to improve utilization, enlarge the validator set, and enforce task indistinguishability. span-verified
Verbatim source span
“we design an isomorphic inference–verification architecture that multiplexes both inference and verification roles across the same GPU workers”; “improves GPU utilization”; “enlarging the effective validator set”; “enforces task indistinguishability.”
SHA-256 of span
978bd51cd16d100f29aabd36607fdef48c042d243c113454803459ef2b6657c2
↩ back to text
[8] The verifiable inference protocol in 'Towards Verifiable AI' replaces full cryptographic proofs with a sampling-based approach using Merkle-tree-based vector commitments and only opens a small number of randomly sampled entries. span-verified
Verbatim source span
“We present a verification framework and protocol that replaces full cryptographic proofs with a lightweight, sampling-based approach”; “The prover commits to the execution trace of inference via Merkle-tree-based vector commitments and opens only a small number of entries along randomly sampled paths from output to input.”
SHA-256 of span
37604cb518018e6c658e9262f92b1e24b63c14ac3af11001fd4a5eed980f1789
↩ back to text
[9] The same paper says proving times drop from the order of minutes to the order of milliseconds, with moderately larger proofs, and that experiments on ResNet-18 and Llama-2-7B support the required statistical properties. span-verified
Verbatim source span
“This yields a protocol that trades soundness for efficiency”; “reduces proving times by several orders of magnitude ... from the order of minutes to the order of milliseconds, with moderately larger proofs”; “Experiments on ResNet-18 classifiers and Llama-2-7B confirm...”
SHA-256 of span
17ab2df6ebfd355c9c9cfdc2e9b67003920ed01926dc1a402998883501c1938c
↩ back to text

Sources

  1. https://www.coinbase.com/developer-platform/discover/launches/introducing-agentkit
  2. https://docs.zprotocol.org/docs/inference/overview
  3. https://arxiv.org/abs/2509.24257
  4. https://arxiv.org/abs/2603.19025
composable-stackai-agentsverifiable-inferenceagentkitz-protocolverillmmodular-infrastructure
AUTOMATED

Get the synthesis

AI×crypto research, repackaged with every claim hash-locked to its source. New arXiv → analysis in ~3 hours.