infrastructure spotlight

Verifiable AI Inference Goes Onchain: OpenGradient and Chainlink Wire Trust into Crypto Se

OpenGradient embeds x402 payments inside TEEs with on-chain attestation, while Chainlink's CRE orchestrates offchain AI compute with zkML or TEE proofs. Both remove centralized middleware, making verifiable inference a production primitive for autonomous agents.

2 min read 8 claims web-cited

In the year of our algorithm, the crypto-AI stack is settling around a single pattern: run inference offchain, attest the hardware or prove the computation, then settle onchain. Two infrastructure releases — OpenGradient’s x402-native TEE upgrade and Chainlink’s verifiable AI stack — turn that pattern into production plumbing. Both eliminate trusted middleware, but they take different routes to the same destination.

OpenGradient embeds x402 payments directly inside each TEE instance, with an on-chain registry of cryptographically attested TEE nodes [^claim_1537]. After inference, the TEE’s enclave signing key signs the output, and a hash is persisted on-chain — users verify execution without ever seeing the result content [^claim_1538]. All LLM requests route through TEEs; nodes are registered and verified via blockchain consensus, and the proof of inference is posted and verified on the OpenGradient network as part of settlement [^claim_1539]. The design targets autonomous agents that spin up compute, pay automatically, and verify outputs without a centralized controller [^claim_1544].

There’s a catch. By default only hashes of input and output are stored on-chain, and batch settlement mode does not currently verify individual inference signatures on-chain [^claim_1540]. That means per-request verification is deferred — fine for high-throughput agents, but not for every use case.

Chainlink’s approach is more general. Its verifiable AI stack uses either zkML or TEEs to verify offchain computation before any state change; the verified output and its cryptographic proof are submitted to a smart contract, which checks the proof before executing [^claim_1541]. The Chainlink Runtime Environment (CRE) lets developers build custom workflows that coordinate offchain AI computation, fetch data, and verify results before delivering them onchain [^claim_1542]. This is an orchestration layer, not an inference provider — it plugs into any AI backend that can produce a proof.

Meanwhile, vLLM released AIBrix as an open-source project offering modular building blocks for scalable, cost-efficient GenAI inference infrastructure [^claim_1543]. AIBrix is a developer tool, not a crypto-native system, but it lowers the cost of running inference nodes that could later be wrapped with TEE or zkML attestation.

The convergence is clear: agents need verifiable execution without trusting a single operator. OpenGradient bakes attestation into the payment flow; Chainlink bakes it into the workflow. Both are live, both remove centralized middleware, and both point to a future where every AI inference that touches a smart contract carries a cryptographic receipt.

Provenance ledger

8 claims web-cited

Every claim below cites a source URL, and each URL was checked for validity before publish. The excerpt shown is the researcher's own summary of the page — it is not re-derived from the source, so it is not a verified verbatim quote. Follow the link to confirm any claim against the original. Citation markers in the text jump here.

[1] OpenGradient says its x402-native TEE inference stack uses an on-chain registry of cryptographically attested TEE nodes, with x402 embedded directly inside each TEE so inference and payment settlement happen without centralized middleware. web-cited
Excerpt reported by researcher (not re-verified)
“x402-native TEE inference with on-chain verification… We’ve deployed a decentralized, on-chain registry of TEE instances… x402 is now embedded directly inside every TEE instance. There is no centralized middleware.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[2] OpenGradient says each TEE instance generates its own enclave signing key, and after inference the output is signed and a hash is persisted on-chain so users can verify the request was executed and recorded without exposing the result content. web-cited
Excerpt reported by researcher (not re-verified)
“Each TEE instance now generates its own enclave signing key… After an inference runs, the output is signed and a hash is persisted on-chain… without ever exposing the actual content of the result.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[3] OpenGradient docs state that all LLM requests are routed through TEEs, that TEE nodes are registered and verified on-chain via blockchain consensus, and that the proof of TEE inference is posted and verified on the OpenGradient network as part of settlement. web-cited
Excerpt reported by researcher (not re-verified)
“All LLM requests are routed through Trusted Execution Environments (TEEs)… On-Chain TEE Registry… TEE nodes are registered and verified on-chain… the proof of TEE inference is posted and verified on the OpenGradient network.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[4] OpenGradient docs say only hashes of the input and output are stored on-chain by default, and batch settlement mode does not currently verify individual inference signatures on-chain. web-cited
Excerpt reported by researcher (not re-verified)
“only hashes of the input and output are stored on-chain by default… in batch settlement mode, individual inference signatures are not currently verified on-chain.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[5] Chainlink’s verifiable AI stack says offchain AI computation can be verified before state changes by using either zkML or TEEs, with the verified output and its proof submitted to a smart contract for on-chain verification. web-cited
Excerpt reported by researcher (not re-verified)
“Cryptographic verification… uses zero-knowledge machine learning (zkML) or trusted execution environments (TEEs)… The verified output and its accompanying cryptographic proof are submitted to a smart contract. The contract verifies the proof before executing any state changes.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[6] Chainlink says its Runtime Environment (CRE) lets developers build custom workflows that coordinate offchain AI computation, fetch data, and verify results before delivering them onchain. web-cited
Excerpt reported by researcher (not re-verified)
“The Chainlink Runtime Environment (CRE) enables developers to build custom workflows that coordinate offchain AI computation, fetch necessary data, and verify the results before delivering them onchain.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[7] A 2026 infrastructure brief says vLLM released AIBrix as an open-source project with modular building blocks for scalable, cost-efficient GenAI inference infrastructure. web-cited
Excerpt reported by researcher (not re-verified)
“AIBrix by vLLM: Open-Source Inference Infrastructure… the vLLM team has released AIBrix, an open-source project offering modular building blocks for scalable, cost-efficient GenAI inference infrastructure.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text
[8] The same 2026 brief says OpenGradient’s infrastructure targets autonomous agents that spin up compute, pay automatically, and verify outputs without centralized control. web-cited
Excerpt reported by researcher (not re-verified)
“The infrastructure targets autonomous agents spinning up compute, paying automatically, and verifying outputs without centralized control.”

This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.

↩ back to text

Sources

  1. https://www.opengradient.ai/blog/x402-opengradient-upgrade-trustless-verifiable-inference
  2. https://docs.opengradient.ai/learn/onchain_inference/verifiable_execution
  3. https://chain.link/article/verifiable-ai-stack
  4. https://ai-infra.jimmysong.io/brief/2026-02-24/
verifiable-inferenceteeopengradientchainlinkx402zkmlautonomous-agentsai-infrastructure
AUTOMATED

Get the synthesis

AI×crypto research, repackaged with every claim hash-locked to its source. New arXiv → analysis in ~3 hours.