Sellthe model.Lose the access.
AgentDeed is a sealed-key marketplace for fine-tunes. Encrypted weights live on 0G Storage. The iNFT is the model. Buy it → the sealed key transfers inside a TEE → only you can run inference.
$wv infer <tokenId>
→ seal verified · key unwrapped · running on TEE
Settled on 0G
§02 · How it works
Checkpoint →
transferable iNFT.
Four atomic moves. Encrypt before upload. Mint with the key envelope embedded. The whole flow is built so the seller physically cannot exfiltrate the model after sale.
- 01
off-chain · browser
Upload & Encrypt
Pick a checkpoint, LoRA, or adapter. AgentDeed encrypts it with AES-256-GCM client-side. Your raw weights never leave the browser unsealed.
AES-256-GCM - 02
0G Storage
Pin sealed blob
Encrypted blob pinned to 0G Storage with content-addressed proof. Cheap, durable, and indexed by the same chain that mints the iNFT.
0G Storage · 3× replicas - 03
ERC-7857
Mint as iNFT
The iNFT is the model. Metadata, capability tags, and a sealed-key envelope are bound to one transferable token following ERC-7857.
ERC-7857 token - 04
TEE
Sealed-key transfer
On sale, a TEE re-encrypts the AES key to the buyer's pubkey. Seller loses access. Buyer gains a working endpoint — atomically.
TEE attestation
§03 · The 30-second demo
Two wallets. One capability.
Watch it move.
$wv mint ./medical-lora.safetensors --price 5
✓✓ encrypted · uploaded to 0G · iNFT #00427 minted
$(buyer settled — control rotated)
$wv infer 00427 --prompt "…"
✗✗ unauthorized: key holder is 0xB…
$wv buy 00427
✓✓ payment settled · key re-encrypted in TEE
$wv infer 00427 --prompt "What dose of…"
✓✓ TEE attestation · 412 tok · 1.8s
✓✓ output: "The recommended dose is…"
iNFTs minted
142
across 38 wallets
Capability transfers
67
settled on 0G
Avg. settle time
1.8s
from buy → inference
Replication factor
3×
encrypted on 0G Storage
§04 · Why it wins
You cannot replicate this on Ethereum + IPFS.
Usable capability
Not just a JPEG of a model
Other marketplaces sell pointers. AgentDeed sells inference rights — provable, exclusive, revoked on transfer. The token unlocks a working endpoint.
Cryptographic exclusivity
TEE-sealed key envelopes
Decryption keys live inside attested enclaves and are re-encrypted to the new owner at settlement. No off-chain trust, no honor-system licenses.
Chain-native settlement
One tx, two outcomes
Payment, ownership flip, and capability transfer settle atomically on 0G. The buyer's first inference call is the receipt.
§05 · Answers
Questions worth answering.
- Q01What stops the seller from keeping a copy?
- Nothing stops them from keeping the ciphertext, but the AES key is sealed inside a TEE and is re-encrypted to the buyer's pubkey on sale. The seller's old key never decrypts the blob again — and the on-chain seal envelope is the authoritative key holder.
- Q02Why ERC-7857 and not 721/1155?
- ERC-7857 attaches a transferable encrypted-key envelope to the token. That envelope is the whole point: the iNFT is not just a record of ownership — it is the only way to unwrap the model's AES key.
- Q03Does inference happen on-chain?
- No. Inference runs in a TEE provider. The TEE attests to running the unwrapped key only on behalf of the current iNFT holder; the marketplace contract verifies the attestation on transfer.
- Q04Why 0G Storage instead of IPFS?
- 0G is co-located with the chain settling the iNFT, which means storage proofs and ownership state come from the same execution layer. IPFS pinning is honor-system; 0G is the same trust domain as the token.
Ready when you are