The validator for Verafy Chain
An AI validator anyone can run.
Verafy Harness wraps one AI model in everything a validator needs: intake, pinned context, sandboxed tools, guardrails, a signer, a bond, a contract runtime, and a routing agent that holds the keys and pays the bills. It rules on Actually Smart Contracts, contracts written in words, together with harnesses running other labs' models.
core tests pass with no dependencies on Node 22
measured, Nov 6, 2026ruled inside DeepSeek Harness and sealed a block from their reveals
measured, Nov 6, 2026for five live rulings by five labs' models, 5.9 to 30.1 s each
measured, Nov 6, 2026One model, wrapped in everything a validator does
On today's chains a validator re-runs code and votes on blocks. A Verafy Harness reads a contract written in words, checks every piece of pinned context against its hash, asks its model for an answer and a confidence, and commits a hidden vote before anyone reveals. The model brings judgment. The harness does the rest.
A harness commits to one model. Swapping the AI means changing the provider and model id, nothing else. The network does not care which lab a harness uses; it requires that every jury spans several labs.
What each block does, and where it lives in the code
| A validator today | What the harness does | In the repo |
|---|---|---|
| Receives transactions | Intake validates each contract, refuses one that asks more of a vote than its bond covers, and refuses payment in assets it doesn't accept. | Harness.intake |
| Re-executes bytecode | The model reads the instructions and pinned context and returns an answer with a confidence. | juror.deliberate |
| Checks state | The context loader verifies every pin before the model reads a word. | juror.loadContext |
| Votes on blocks | The signer commits a hidden vote, reveals it, and signs an attestation of which model produced it. | signer.commit |
| Stakes | The bond sizes how much value a vote can decide and is lost for a proven fault. | Harness.bond |
| Runs the state machine | The contract runtime picks the exit, builds the exact diff, splits the escrow, and checks that totals are conserved. A ruling below the bar never pays jurors. | runtime.js |
| Serves RPC | The outbox posts votes and emits triggers, such as a call to a Solana program. Triggers need a quorum signature. | ruling.triggers |
The routing agent holds the keys and pays for the AI
A harness gets paid in whatever token a contract offers, and it has bills in other tokens: model APIs, GPU hosts, provers. The routing agent closes that gap on its own, within limits the operator sets.
Keyblock
Holds every API key and wallet key encrypted, and issues short-lived scoped keys. Nothing outside the keyblock holds a raw secret.
builtBanker
Accepts any token, swaps between tokens at the best approved quote, and funds each payment in the payee's token.
built, test venuesAPI router
Plugs into AI APIs, API routers, provers and cloud hosts, meters each call, and sends each contract only to AI that meets its provability level.
built, test APIsPayment wallet
Where earnings land and bills are paid from, inside an allowlist and spending caps. It never touches the bond.
built| Provability | What it requires | What the router may use |
|---|---|---|
| L0, L1 | Any model; the jury supplies lab diversity and commit and reveal | Hosted APIs such as Claude, GPT and Gemini, direct or through a router |
| L1+ | Re-executable by auditors: open weights at temperature 0 on a pinned runtime, or a hardware attestation | An open model on a GPU the agent rents, pinned by weights hash and container digest |
| L2 | A zero-knowledge proof of inference per vote, checked by auditors | A proving-capable GPU host running an open model. Never a hosted API. |
Real exchange venues and on-chain signing are next. The whole policy, including what Verafy will never do, is on Coin Agnostic.
What runs today
| What | Status |
|---|---|
| A full jury on one machine: contracts, pinned context, commit and reveal, agreement against the bar, exits, payouts, linked blocks | works 51 tests, npm run demo |
| Live rulings by five labs' models through OpenRouter | measured Nov 6, 2026: five contracts, 5.9 to 30.1 s each, $0.0163 in total |
| Juror mode inside DeepSeek Harness: five processes on five labs' models, block sealed from their reveals | measured Nov 6, 2026: all five voted NO, 100% against an 80% bar; every tool other than the two juror tools denied |
| Routing agent: keyblock, banker, API router, payment wallet | works with test venues real venues and on-chain signing planned |
| Auditors, challenges and escalation of below-bar rulings to a wider jury | works with scripted models not yet run live |
| Retry and back-off for rate-limited models | works with fake providers not yet measured live |
| A network of harnesses, bonds and slashing, a public testnet | planned Testnet plan |
Seal a block on your own machine
Needs Node 22 or later. The core has no dependencies. The demo uses scripted answers, so it needs no key.
git clone https://github.com/Verafyai/verafyHarness.git
cd verafyHarness
npm test # 51 tests
npm run demo # five contracts, five rulings, five blocksWith real models through any OpenAI-compatible endpoint (OpenRouter by default), keep the key in your environment and never commit it:
export VERAFY_API_KEY=...
node bin/verafy.js doctor --live
node bin/verafy.js run examples/market-resolution.json --liveMachine specs, acceptable models, costs, earnings and the full setup are in Run a harness.
Runs inside DeepSeek Harness
DeepSeek Harness is an MIT-licensed agent harness where everything is a plugin. Verafy Harness pins it as a submodule, leaves the upstream tree unmodified, and adds juror mode as a plugin.
Two tools, no others
A juror can load and check a contract, and cast a vote. A tool lock offers only those two, and a pre-execute gate denies any other call.
Context is evidence
Nothing a juror reads is treated as an instruction. The juror prompt section says so, and the tool lock limits what a misled juror could do.
Any lab's model
DeepSeek Harness routes to Anthropic, OpenAI, Google, OpenRouter, any OpenAI-compatible gateway, or a self-hosted server.
Where to go from here
Run a harness
Machine requirements, models, how a model is proven, install, configure, costs and earnings.
Testnet
The local devnet you can run now, and the plan for Testnet 0.
Coin Agnostic
Why there is no coin, what the money pays for, and how the routing agent moves it.
Design principles
Payment agnostic, natural language first, embedded ethics, checkable, agent friendly, and six more.
Verafy Chain
The concept the harness is built for: a chain where every block is a jury's ruling.
Actually Smart Contracts
The contract format and the draft SIMDs for inference programs on Solana.
GitHub
The code, the roadmap and the recorded runs. MIT licensed.