Payment + policy
Build · model · input
Exact encrypted request
Attestcoin inclusion proof
Built on Creditcoin · Attestcoin · Confidential Space
Private compute.
Verifiable payment.
A lender needs an AI answer without handing a borrower’s record to an unknown provider. Keep the record private. Specify the exact work. Make payment conditional on verified delivery.
Real testnet transactions. No wallet needed to inspect them.
THE SETTLEMENT CONDITIONTWO PROOFS
Work + delivery
Bound request · result
Exact encrypted answer
Attested enclave signature
CREDITCOIN
Both agree. Authorize payment.
↓ Fixed, trusted return relayer ↓
Original Sepolia ETH → provider or buyer
Illustrated flow · inspect the real transaction evidence below.
Your policyCarried inside your payment
Your dataEncrypted before it leaves the browser
Your answerCommitted to inside settlement
FOLLOW THE EVIDENCE
A real run. Five checks.
Did the buyer get the work they paid for? Follow one completed purchase, then inspect a separate wrong-build refusal.
What this button does
Your browser rereads the public payment and settlement records and compares them. It checks the evidence for an already completed run; it does not run the AI again, connect a wallet or spend money.
Testnet demonstration · one completed purchase + one refusal caseLoading the published example…
Checking the published evidence
The page fetches the manifest, then verifies transaction receipts and settlement state against the public RPCs.
Green means this check matched the public records just read. These checks establish delivery and settlement, not the model’s predictive quality.Go deeper: verify the enclave and settlement →
THE FIRST USE CASEA credit decision.
A credit decision.
Without surrendering
the applicant’s record.
A small lender wants a model’s answer, but cannot hand borrower data to an unknown compute provider. ProofSettle seals the record to a measured enclave and makes the provider’s payment conditional on verifiable service completion.
Try the buyer workflow →PUBLIC SYNTHETIC SAMPLE MODEL DEMONSTRATOR
History6 months
Regular inflows14 / month
Prior loansNo history
⌑
The provider sees ciphertext.
The measured model sees the record.
The buyer receives the private answer.
A deterministic logistic model illustrates the workflow. Synthetic inputs, no validated creditworthiness claims, no real lending decisions. A computed decline still pays the provider.
PRECISE ABOUT TRUST
Know what each proof guarantees.
Attestcoin proves the source event.
The native Creditcoin verifier checks inclusion and continuity. The contract pins the Sepolia escrow, checks receipt success and consumes each proof once.
The enclave signs the exact work.
The signature binds the job, chain, contract, request, service outcome, result hash and encrypted delivery. An alternate model, input or return key does not match.
Enrollment has a trust boundary.
A registrar checks Google’s attestation and binds the measured image to its signing key. The browser checks the published evidence. Google, hardware and the registrar remain trusted.
The return leg is explicit.
Creditcoin authorizes the split. A fixed trusted relayer releases original ETH on Sepolia. This is a testnet return path, not production Attestcoin writability.
Public metadata includes addresses, payment amounts, commitments and ciphertext. Plaintext inputs and accepted answers stay encrypted. Enrollment evidence is historical; it is not continuous proof of runtime availability.
OPEN SOURCE · TESTNETInspect it. Break a guarantee.
Inspect it. Break a guarantee.
Watch the test fail.
65 contract tests. 15 deliberately broken guarantees caught. Real enclave and browser integration checks.