Verifiable AI chat

Public testnet. Testnet DNDR is never sold.

Checking whether a miner is available right now…

Checking the network…

Verify this answer

Don't trust it. Check it.

Send a message, then press Verify this answer under the reply.

The life of a job on chain

For the answer you verify, its step is highlighted from the gateway's report.

How this is decided

The draw. At the next block, a random draw picks a share of settled jobs for audit, set by audit_sample_bps (in hundredths of a percent).

The jury. Other miners judge the answer; the jury excludes the miner under audit. A conviction needs “invalid” verdicts at the jury bar, which is the larger of audit_min_quorum jurors and two thirds of the anchored seats (the jury seats fixed when it was drawn), and from a strict majority of the voting stake.

No jury, no slash. A drawn job below the jury floor (audit_min_quorum + 1 present, eligible miners) or with no verdict within audit_unwind_blocks is refunded to its client, and nobody is slashed. So is a job whose draw is still waiting for randomness after audit_unwind_blocks.

When the miner is paid. With hold_bps at 10000, as at launch, the miner's net share and the protocol's cut are retained at settlement: paid when the job is final if it is not drawn, paid on an upheld verdict, refunded after audit_unwind_blocks if no jury concludes. A lower hold_bps pays the unheld share at settlement, before any audit.

The draw's randomness, on the Explorer Current values of these parameters, on the Explorer The same values as JSON, read from the chain How verification works When a miner is paid

Who can read your prompt

On the miner, the miner software decrypts your prompt and passes it to the model it serves. A hash is a fingerprint of the prompt that does not contain its text. An embedding is a list of numbers that summarises the answer's meaning, and anyone can read it on chain.

More on privacy

On the miner, while the model answers, the miner software keeps your prompt out of crash dumps and blocks writing it to disk or sending it anywhere but the model, where the host allows it. If the job is drawn for audit, the miner re-seals the prompt and answer to its jurors: from kit v0.2.1, to the jurors the chain anchored for that audit and to no other miner; a miner on an earlier kit seals them for every other registered miner.

The gateway also reads the answer on its way back to you. The relay between the gateway and the miner carries ciphertext only. Outside the project, a prompt reaches the public network through the Dendra gateway, or, when the relay applies a request price, from a client that opens and pays for its own job: handing it to a miner is a write on the relay's request route, which takes a token the project does not distribute, or a signature by the key that paid for the job, while the job is open and escrowed at least that price. A relay with no price refuses every signed request, and the network publishes the price only when the relay applies it. This page goes through the gateway. A gateway you run serves your own stack, a separate chain served by the miners you attach to it.

Privacy in the docs

Verifiable AI chat

Ask an open model. Then check who answered.

Ask

A community miner answers

Verify