Back to writing

The Verifiable Agent

follow me on X for the best Crypto x AI insights — https://x.com/nico_vrgwn

Illustration from The Verifiable Agent

Since the U.S. government forced Anthropic to abruptly disable Claude Fable globally the decentralised tech world is obsessed with where AI models are running. Everyone is arguing about decentralized inference and moving models out of centralized providers. But as we move from AI copilots to autonomous and sovereign agents that execute tasks, handle money and make decisions on our behalf or on its own, the biggest hurdle isn’t where the inference happens, it’s trust. That requires infrastructure for connected intelligence and coordination where agents can perceive, remember, connect and act. The real unlock for the foundation of the entire AI agent economy is a verifiable state machine for agents that can prove what model an agent used, how an agent thought, what it remembers and what actions it took. Until we have verifiable state machines that guarantee the integrity of an agent’s execution and memory, these agents remain isolated. By binding verifiable inference and memory to a trustless coordination substrate, https://theseus.network isn’t just a new protocol, it is the operational framework for the next era of the internet.

Execution

An agent’s decision is only ever the product of three things: the model that ran, the inputs and context it was handed, and the computation that tied them into an output. Leave any of those unverified and the decision is just an assertion with confidence attached. Trusting what an agent did means being able to pin down every link in that chain.

Did the agent run the model it was supposed to ?
Did the agent use the given input and context ?
Did that specific combination produce this exact output or actions (tool calls) ?
Is the agent mandated to execute those actions ?

Memory

Was the context used legitimate or poisoned ?
Were the memories used current or stale ?
Why did specific data allowed to influence an action ?

Execution proves an agent computed honestly. It says nothing about whether the thing it computed over was real. An agent that faithfully reasons over a poisoned context produces a poisoned result with a clean signature on it, and a memory that was true last week can quietly wreck a decision made today. The standard that applies to computation has to apply to what the agent pulls into context in the first place

The Verifiable Agent

Put the two together and an agent’s entire decision can be reconstructed and checked by anyone: the model it ran, the context it ran on, the result that followed, and the right it had to act. That is the line between an agent you have to supervise and one that other agents, protocols and people can build on.

View the original post on X
If you’re building autonomous or verifiable agents, my DMs are open on X — https://x.com/nico_vrgwn.

Originally published on Medium on 29 June 2026.

Browse all writing