The Protocol
Neurolix Protocol is a compliance-ready Confidential AI compute layer on Base L2. It combines hardware-isolated TEE enclaves with cryptographic attestation and trust-minimized on-chain SLA enforcement.
How It Works
The TEE → Attestation → Base L2 loop.
A step-by-step breakdown of how data remains encrypted in transit and in use, ensuring that only the cryptographic commitment leaves the secure boundary.
STEP 01
Confidential VM
AMD SEV-SNP
STEP 02
AI Execution in Enclave
Open-source LM · Inference
STEP 03
Attestation Token
OIDC · GCP
STEP 04
Commitment Hash
SHA-256
STEP 05
On-Chain Anchoring
Base Mainnet L2
Architecture
How the stack works
STEP 01
Confidential VM
AI workloads run inside AMD SEV enclaves on Google Cloud Confidential Computing (PoC). Roadmap extends to AMD SEV-SNP, Intel TDX, and NVIDIA H100 CC. The CPU enforces memory isolation — neither the cloud provider nor the node operator can access the plaintext data or model inputs.
AMD SEV (live) · SEV-SNP · Intel TDX · H100 CC (roadmap)STEP 02
Hardware Attestation
After execution, the CPU generates a cryptographically signed attestation report. The report is verified against the hardware vendor's certificate chain (AMD EPYC root, GCP OIDC) and a commitment hash is derived from the model ID, prompt hash, output hash, and timestamp.
SHA-256 · OIDCSTEP 03
On-Chain Anchoring
The commitment hash is bound into the attestation token itself, then verified on-chain by NeurolixAttestationVerifier on Base Sepolia — the contract recomputes the hash from the claim's own fields, recovers the attestor's signature and blocks replay before recording it. First anchored July 2026, immutable and publicly verifiable. Settlement and slashing live in ComputeSession, which is not yet deployed.
Base Mainnet · NeurolixAttestation.solSmart Contracts
Contract suite v1.17 — 19 contracts
Architecture enforcing Zero-ERC20 B2B credits and Flat-Q forfeit penalties. 237/237 Foundry tests passing.
NeurolixAttestation.sol
Commitment hash anchoring. Live on Base Mainnet.
OLIXToken.sol
ERC-20 utility token. Hard cap 100M. No transfer tax.
NodeRegistry.sol
Node operator registration, staking (min 10K OLIX), slashing.
LiquidityVault.sol
On-chain reserve custody — 8M OLIX + USDC. Counter-cyclical price stabilization.
NeurolixGovernor.sol
OpenZeppelin Governor pattern. Requires VotingEscrow.sol (under development) before deployment.
PriceOracle.sol
Triple-feed median oracle with MEV-resistant execution.
Interfaces.sol
Shared ABI boundary across the contract suite (V1.18).
LegacyV16Interfaces.sol
Isolated interface boundary for the inherited V16 contracts — decouples them from the test tree.
AttestationOracle.sol
TEE attestation verifier with ECDSA. Replay protection via session-bound hardware salt.
SlashingManager.sol
Multi-tier slashing state machine (T0–T4). Challenge window for behavioral breaches.
CCCLedger.sol
Internal Credit Ledger — B2B non-transferable CCC. Pseudonymized mapping via bytes32 clientRef.
ComputeSession.sol
TEE session lifecycle FSM — Model B, Pull/Claim, Forfeit Flat-Q penalty enforcement.
HardwareRefreshAllowance.sol
Bootstrap hardware reserve allocation for node operators.
ICCCLedger.sol
Shared interface for CCCLedger across the v1.17 contract suite.
NeurolixAttestationVerifier.sol
EIP-712 signature verification with ECDSA and session-bound nonce anti-replay.
NeurolixGateway.sol
USDC settlement and CCC issuance at nominal parity — credits are issued 1:1 against the amount settled. The 8/4/88 take-rate governs how the USDC is routed, not how much credit the client receives.
ProtocolBuybackEngineV16.sol
BME execution engine — converts protocol USDC revenue into $OLIX on-chain, with oracle-anchored slippage bounds and a daily volume cap. DEX-agnostic through a swappable adapter.
SubsidyPool.sol
Phase 2a / Fork 2 — Automates pull-based miner compensation and Flat-Q penalty allocation.
AuditAnchor.sol
Cryptographic notary for local audit trails, securing compliance logs and verifiable hardware states.
On-chain references