Pre-launchPrivate AI on Robinhood Chain
Ask in private.
Get every answer under oath.
The machine that answers cannot read your prompt. The answer comes back signed. Witnesses check the receipt.
- @OathNetworkRH
- GitHubSoon
- App
Community-launched. Not affiliated with Robinhood Markets, any brokerage, any exchange or any social network.
Receipt
SampleSample machine. Its key was made in your browser a moment ago. The sealed chat is not live yet.
Making a sample key in your browser…
- 0
- Receipts issued
- 0
- Witness tabs on duty
- 0
- Forgeries caught
Pre-launch. These start on the day the sealed chat opens, and they are counted from the public record.
Contract address · $OATH · Robinhood Chain
Not launchedThe token does not exist yet.
Its address will appear here first, then in one post that links back to this page.
Check the address here before you sign anything. A copy of it anywhere else can be fake.
Order of events: the sealed chat opens, the witness tabs open, and only then the token.
Ask
Run the check before you trust a word of this page.
This bench runs the real mathematics in your browser. A key signs a receipt, three witnesses recover the signer from the signature, and a witness that signs a forgery has its stake cut. The one thing missing is the sealed machine itself.
SampleSample bench. Every key here was made in your browser and nothing you type leaves this page. The sealed chat opens in Phase 1.
1 · Your question
It is hashed with a random salt. The receipt holds the hash, never the words.
A lazy witness answers “agreed” to everything. Forge a receipt and see what that costs.
2 · Receipt
No receipt yet. Seal a question to make one.
3 · Witness round
Three witnesses are waiting for a receipt.
- A 100,000 stake
- B 100,000 stake
- C 100,000 stake
Record
burned 0 · owed to A and B, each 0
Receipt
A receipt proves where an answer came from. It never holds the question.
Every answer comes back with one. Your browser checks it in seconds, and anyone you send it to can check it again.
In the receipt, public
- 01Receipt id and time
- 02Model name
- 03Code fingerprint of the sealed machine
- 04Hash of the hardware attestation
- 05Hash of the answer
- 06Salted hash of the prompt, which cannot be reversed
- 07The enclave's signing address and its signature
- 08Three witness signatures, once the round closes
Never in the receipt
- Your prompt
- The answer text
- Who you are. A free answer needs no account at all
One answer, six steps
- 1You type a questionNo wallet, no signup.
- 2Your browser checks the machineIt reads the hardware attestation and compares the code fingerprint before it sends anything.
- 3The sealed machine answersThe prompt is decrypted inside the enclave only, and the answer is signed there.
- 4You get the answer and a receiptThe proof sits beside the answer, never behind a click.
- 5Three witnesses check the receiptTwo of three must agree.
- 6The receipt becomes public recordBatched on Robinhood Chain. The prompt is not in it.
What “sealed” means here
- The answer is produced inside a hardware enclave: memory that the machine's own operator cannot read.
- The enclave proves which code it runs before it is given anything, and your browser checks that proof.
- We run the service and we cannot read your prompt either. The path is from your browser to the enclave.
- Every answer is signed by a key that was born inside the enclave.
What it does not mean
- It does not mean “cannot be broken”. Enclaves rest on the chip maker, and published research has broken them with physical access to the server. We say hardware-attested and nothing stronger.
- It does not mean the model is right. A signed answer proves where it came from, not that it is true.
- It does not mean you are hidden on chain. Paying from a wallet is public.
Witness
Hold the token, open a tab, become a witness.
A witness is a browser tab that checks receipts. The work is exact mathematics, so every laptop reaches the same result. You are paid for correct checks and for nothing else.
- 1Stake the bond100,000 $OATH goes into the bond contract. It is the money a lie will cost you.
- 2Leave the tab openThe tab is drawn into rounds at random from a public seed. Each round is a few milliseconds of work.
- 3Get paid by the hourOnce an hour the pay pool is divided by correct checks. There is no fixed rate.
What a witness sees
- The receipt: hashes, the signer, the signature
- The registry of machines that count
What it never sees
- The prompt
- The answer
- Who asked
Later, tabs will also run small open models for public jobs, under the same rule: three tabs, hidden audits, stake at risk.
Ranks are a record, not a privilege
Sworn
0 to 99 clean checks
Steady
100 to 999
Trusted
1,000 to 9,999
Unbroken
10,000 and above
Rank comes from clean checks in a row. It changes nothing about pay or about the draw, and one signed forgery returns a witness to the first rank.
What volume means for a witness
Per tab per day, if work is spread evenly
$2.00
Into the vault per day: $1,000
- Witness pay, 40%$400
- Buyback and burn, 30%$300
- Upkeep, 20%$200
- Breach pot, 10%$100
Arithmetic, not a forecast. It assumes the launchpad's creator fee is about 1% of trading volume, which is what creators there have received. When volume falls, pay falls with it.
Perjury
One receipt in twenty is a forgery we planted.
A witness could skip the work and answer “valid” every time. Most receipts are valid, so laziness would look like honesty. A planted forgery looks exactly like a real receipt until it is checked.
- A signature from the wrong key, a fingerprint that is not in the registry, or an attestation that does not match its hash.
- A witness who signs it has proven, on the record, that it did not check. Its own signature is the evidence.
- The contract verifies that evidence by itself. A cut never depends on our word.
- Planted receipts never count as real ones. They are removed from every public counter.
What a signed forgery costs
Each cut takes that share of what is still staked. Half goes to the witnesses who were right in that round. Half is burned.
Unstaking takes seven days, so a cut cannot be dodged by leaving.
Perjury board
Pre-launch0
No witness has been cut. There are no witnesses yet.
When it starts, each row will hold the address, the forged receipt, the witness's own signature over it, the size of the cut and a button that re-checks the evidence in your browser.
Ways to cheat, and what stops each one
Attack
Defence
AttackSign “valid” without checking
DefencePlanted forgeries, one in twenty. A signature on one is the proof.
AttackThree tabs agree to lie together
DefenceWitnesses are drawn at random and do not know each other.
AttackRun many tabs to be drawn more often
DefenceEach tab needs its own 100,000 $OATH bond. More tabs, more at risk.
AttackCopy another witness's result
DefenceChecks are committed before any result is revealed.
AttackThe operator favours a friend's tab
DefenceThe draw seed is public and anyone can recompute it.
AttackFlood fake questions to raise pay
DefenceFree answers are capped per day, and pay comes from fees, not from load.
AttackLeave before a cut lands
DefenceSeven-day exit. Cuts reach back through the whole wait.
Ledger
Every fee goes into one vault, and nobody holds its keys.
Trading fees on the token and the platform fee on paid answers land in the same contract. The split is written into it at deployment. There is no owner, no pause and no way to withdraw around it.
40%
Witness pay
Divided every hour by correct checks.
30%
Buyback and burn
Buys $OATH on the open market and burns it.
20%
Upkeep
The sealed machines, the free tier, the people.
10%
Breach pot
Paid to whoever proves a sealed machine was read.
The honest arithmetic
- A sealed answer is cheap. Open models running in GPU enclaves list between $0.10 and $3.00 per million input tokens (list prices, 12 October 2026).
- One ordinary chat turn on a mid-size model costs about $0.0004. The platform fee on it is under $0.0001.
- So in the first phase the vault is filled by trading fees, not by usage. We say it here because others hide it.
The breach pot
Pre-launch0 ETH
in the pot. Pre-launch. It opens with the token.
- Each sealed machine creates a random secret when it starts and publishes only its hash.
- One tenth of every fee collects in the pot.
- Anyone who submits the secret itself is paid the pot by the contract. The only way to have it is to have read the machine's memory.
The team holds no supply
- No allocation is reserved for the team.
- No purchase is bundled into the launch transaction.
- Nothing is vested, because nothing is held.
- The team is paid from the 20% upkeep share, in public, on chain.
One power we do not hold, disclosed
The launchpad we plan to use keeps one owner power: it can re-point a coin's future creator fees to another address, after a three-day notice that anyone can see on chain. Fees already inside the vault cannot be moved by anyone.
Contract facts
- Name
- Oath Network
- Symbol
- OATH
- Supply
- 1,000,000,000, fixed, no mint function
- Chain
- Robinhood Chain (4663)
- Launch
- Fair launch on a Robinhood Chain launchpad, all supply on the curve
- Team allocation
- None
- Presale, private round
- None
- Fee recipient
- OathVault, a contract with no owner
What $OATH is for
Open
No wallet
- 5 sealed answers a day
- Every receipt, every check
Holder
Hold 25,000 $OATH
- 20 sealed answers a day
- Platform fee 10% instead of 20%
Witness
Stake 100,000 $OATH
- Everything above
- May run a witness tab, paid per correct check
- Stake is cut for signing a planted forgery
What the token may never do
- Buy a different answer. Holders and visitors get the same model and the same receipt.
- Buy a ruling. A witness with more stake is not drawn more often.
- Skip an audit. Every staked tab receives planted forgeries at the same rate.
- Pay for sitting in a wallet. Pay is for correct checks, and only for those.
- Carry a vote. The first version has no governance.
The difference
What you are usually asked to accept, and what you get here.
The usual
Oath Network
The usualAI services read and store what you type
Oath NetworkThe machine that answers cannot read what you type
The usualA privacy page nobody can check
Oath NetworkA signed receipt your own browser checks in seconds
The usualCompute tokens that ship a paper and a preview
Oath NetworkA working chat on day one, free, no wallet needed
The usualMarketplace lists made of placeholder offers
Oath NetworkEvery number on the site is counted from real receipts
The usualA token that sits outside the product
Oath NetworkThe token is the bond a witness puts at stake
The usualFees paid to a wallet a founder controls
Oath NetworkFees land in a vault with a fixed split and no keys
The usualTeam allocations and launch-block purchases
Oath NetworkThe team holds no supply at all
How it is built
Five parts, and what each one is allowed to know.
Your browser
- checks the attestation
- encrypts the prompt
- verifies the receipt
Sealed lane
- decrypts inside the enclave
- runs the model
- signs the answer
Coordinator
- draws witnesses
- plants forgeries
- scores rounds
Witness tabs
- verify receipts
- sign the result
Robinhood Chain
- ReceiptLog
- SignerRegistry
- WitnessBond
- OathVault
What we, the operator, can do
- Delay or refuse an answer. We run the entry point.
- Stop the service.
- Choose which models are offered.
The first version is not decentralised. The coordinator is ours. We will use that word only when independent operators run it.
What we cannot do
- Read a prompt or an answer. They are decrypted only inside an enclave whose code your browser checked.
- Forge an answer. That would need the enclave's key.
- Pick the witnesses. The draw comes from a public seed.
- Cut a stake by decree. A cut needs the forged receipt and the witness's own signature, verified by contract.
- Move fees. The vault has no owner and no withdraw path.
Four things we must prove before launch
- 1The full attestation check runs in a browser, on a phone too, in under two seconds.
- 2The browser reaches the enclave directly. If traffic had to pass through our own server in the clear, the claim “we cannot read it” would be false, and we would not make it.
- 3The enclave capacity we use may be resold under its terms, with a second source ready.
- 4The vault and bond contracts pass on a fork of the chain, including a cut driven by a real signed forgery.
Built with
- Frontend
- Next.js, React, Tailwind
- Wallets
- Any EVM wallet
- Chain
- Robinhood Chain, Solidity contracts
- Sealed lane
- Attested GPU enclaves, two independent sources
- Records
- Managed Postgres, encrypted at rest. No table holds a prompt or an answer.
- Verification
- WebAssembly in the browser, open source
Order of work
Product first. The token comes third.
Phase 0Now
Proof
- Attestation check running in a browser
- Direct path from browser to enclave, measured
- Resale terms confirmed, second source lined up
- Vault and bond contracts passing on a fork
All four pass, or the claim that failed is removed from this page.
Phase 1
Sealed chat
- Five free sealed answers a day, no wallet
- The proof panel and “check it yourself”
- Public receipt pages and receipt cards
- Counters start at zero and count up from real receipts
No token yet.
Phase 2
Witness tabs
- The witness tab, with test stake
- Rounds, planted forgeries, hourly scoring
- Ranks and the Perjury board
- Paid credits: deposit, spend, withdraw
Still no token.
Phase 3
$OATH
- Fair launch with the vault as fee recipient
- Real stake replaces test stake
- Hourly witness pay from the vault
- The breach pot opens
The team buys nothing.
Phase 4
More work for the network
- Developer API and SDK
- Tabs run small open models for public jobs
- Sealed judge: contracts verify a signed ruling
- Independent coordinators
Only then: the word “decentralised”.
What we will not do
- Launch the token before the chat works
- Show a counter that is not counted from the record
- Promise a pay rate
- Call enclaves unbreakable
- Add a channel outside our account, GitHub and the docs
On the record
The decisions, what we watch, and where this can fail.
Strengths
- It works before the token exists
- Every claim on this page can be checked by the reader
- The token has a job, and the job can cost you money
- The team has nothing to sell
Risks
- Enclaves depend on chip makers and can be attacked physically.
- Witness pay follows trading volume and can fall to zero.
- In the first version, witnesses add a second pair of eyes, not a new security layer: the asker already checked.
- We depend on outside enclave capacity.
- The first version is run by us. It is not decentralised yet.
Decisions
Tabs start as witnesses, GPU work comes later
Receipt checks are exact mathematics: every laptop agrees. It works on day one.
Vault split 40 / 30 / 20 / 10
Witnesses first, then burn, then upkeep, then the breach pot.
Product before token
Nobody buys a coin for something they cannot open.
The team holds no supply
Nothing to vest, nothing to sell, nothing to explain later.
Fees to a keyless vault
A founder's wallet is a promise. A contract is a rule.
A free tier with no wallet
The first proof has to be free and take ten seconds.
Cuts need on-chain evidence
A cut by decree would make us the thing we replace.
No pay rate promised
Pay is a share of real fees. It can be small. It can be zero.
What we watch
- Receipts issued and receipts witnessed
- People who pressed “check it yourself”
- Witness tabs on duty
- Forgeries planted, caught and signed
- Vault inflow, pay out, burned, pot
- Days the breach pot has stood
What we ignore on purpose
- Follower counts
- “Total value locked”
- Token price as a measure of the product
Do not take our word for it.
Forge a receipt on the bench. Watch the check fail. That is the whole product.