Dendra
Final Testnet Season

What is built. What comes next.

Verifiable AI on the GPUs people already own. Join with a GPU or with a CPU: a GPU mines; a CPU judges for now, and answers its share of requests too.

Below, the tree: the stages of growth and the branches that grow from them. Then every technology by where it stands, from what the protocol already runs to what comes next.

See every technology The growth stages

How to read the tree and the board

Integrated
Part of the shipped protocol and kit.
Ready
Built and switched off by default. A chain parameter or an operator setting turns it on.
In development
First code exists. A demonstrator counts; a code path the shipped miner cannot use does not.
Coming
Written up in a design document (designed) or chosen (planned). Some wait on a measurement first.
Solid line
The stage it leads to has an integrated item: it has grown. A branch line is solid once the stage it forks from has grown.
Dashed line
Still to grow: no integrated item yet in the stage it leads to or, for a branch line, in the stage it forks from.

The shape of a marker gives the status; on the tree its colour says where the item grows. A card changes status only with the code that justifies it. Cards carry no target dates.

From one seed to the world’s AI

The protocol is the seed, Final Testnet Season is the roots and Mainnet is the trunk. Power, Privacy and Ecosystem are the branches that grow from the trunk.

Hover, focus or tap an item for one line on what it does. Each part links to its cards on the board below.

  1. 01 · Seed

    built

    The protocol

    Verifiable AI, already running on chain.

    • Integrated: Verified AI

      Each job’s fee is held until a random draw, seeded by the validators’ VRF, decides whether a jury of AI judges run by other miners audits it; a convicted miner loses part of its stake.

    • Integrated: Encrypted to the miner

      The gateway seals each prompt to the serving miner’s key; the relay carries ciphertext only.

    • Integrated: Chat-completions API

      Change one URL in any chat-completions client: every answer carries a proof block whose job id anyone can look up on chain.

    • Integrated: GPU mines, CPU judges

      The kit picks the open model each NVIDIA card can serve, and a machine with enough system RAM judges. Miners prove their presence on chain, and only present miners are drawn for work.

    • Integrated: Fixed supply

      10,000,000 DNDR and no mint module: the supply can only fall.

    Show the seed cards

  2. 02 · Roots

    Final Testnet Season

    Miners earn testnet DNDR until 7 November 2026, 23:59 UTC.

    reading the season

    • Integrated: Earn testnet DNDR

      Mine on an NVIDIA GPU or judge on a CPU, and earn by a formula published in advance, computed in public and paid every seven season days.

    • Integrated: Points become mainnet DNDR

      Each testnet DNDR the season pays you is one point, and each point becomes one mainnet DNDR, credited in the mainnet genesis to the address that received it.

    • Integrated: One miner per GPU card

      As an option, each NVIDIA card in a rig can run its own miner identity, with its own stake and keys.

    • Integrated: Rented GPU pods and HiveOS

      Mine from rented GPU pods and from HiveOS rigs, paid to an address you name.

    • Integrated: Protected keys and stake

      The kit and its HiveOS package encrypt a new miner’s keys at rest, and owner mode keeps the stake on a key held on another device.

    • Integrated: Join as a validator

      Guided scripts sync a node and bond it as a validator.

    • Integrated: Miner app and installers

      A Linux desktop app shows and drives your miner; Windows installs through WSL 2.

    • Integrated: Judge on by default

      A machine that can judge seats the judge when it installs or updates, with an option to decline. A seat without a judge never votes.

    • Integrated: Automatic updates, bounded

      The kit checks once a day for a newer signed release of the same consensus epoch, prints its plan, updates, and goes back if the miner does not return. One setting turns it off.

    • Integrated: Signed releases

      Each release tag and its list of checksums are signed with an offline key of the project, and the kit verifies a tag's signature whenever it installs a tagged release or updates.

    • Ready: Probation for new identities

      A new identity earns 60 percent of its season pay during its first full day. Its first jobs are audited more often once the chain parameter audit_probation_jobs is set above 0. It is announced before it applies.

    Show the roots cards

  3. 03 · Trunk

    still to grow

    Mainnet

    The network goes live, after the season.

    • Coming: Mainnet launchplanned

      Launches after the Final Testnet Season. The list of season points is published with its hash, so anyone can recompute it. Each miner’s owner then sets its payout address on chain.

    • Coming: Permanent chainplanned

      Never reset: every change after launch is an upgrade made in place, rehearsed on the testnet during the season.

    • Ready: Open to independent validators

      Starts on the project’s validator, then opens: independent validators join, and the work and audit draws are seeded by several of them.

    • Ready: Availability rewards

      On-chain pay for miners who stay available, and a liveness slash armed once a live run confirms it spares honest miners.

    • Ready: Proven models

      Every commit names a registered model and its anchored weights hash; miners sign a fingerprint of their code and weights, and confidential jobs can require it.

    • Coming: All in Go

      The miner, the gateway, the relay and the judge move from Python to Go, the language the chain is written in: one codebase and one toolchain from the node to the miner.

    Show the trunk cards

The branches grow from the trunk

Power, Privacy, Ecosystem: each grows from the trunk, so its line stays dashed until the trunk has grown.

  • branch · Power

    More AI, more power

    More models, bigger machines, new kinds of work.

    GPU power and models

    • Coming: Multi-model networkplanned

      Each request names its model and goes to the miners serving it; several cards in one machine pool to serve larger models.

    • Coming: GPU pools and data centersdesigned

      Operators pool GPUs to serve the largest models, and professional fleets join beside home rigs.

    • Coming: Beyond textdesigned

      Images first, as a verified-effort tier checked by a randomly drawn jury; then audio, video and embeddings.

    Training

    • Coming: Fine-tuning

      Improve existing open models with the network’s compute.

    • Coming: A model grown by the network

      Start from a small base model and grow it by training on every connected machine: GPUs, CPUs, RAM and storage.

    Verification without a judge

    • Coming: Exact recomputationdesigned

      Deterministic inference gives the same bits on the same execution class: a peer re-runs the job and compares hashes, and a bisection fraud proof finds where two runs diverge. Juries stay the fallback.

    • Coming: Judge diversitydesigned

      Several distinct judge models required in every conviction.

    More roles for CPUs and phones

    • Integrated: Judging

      A CPU with enough system RAM already judges, with or without a GPU.

    • Coming: New CPU rolesplanned

      Serving embeddings and small models, recomputation audits, community relays.

    • Coming: Phones join the network

      Light roles for phones: small models, checks and relays.

    Show the Power cards

  • branch · Privacy

    Confidential AI

    Private AI on the world’s GPUs.

    Privacy by cryptography

    • In development: Confidential MPC mode

      The prompt is split into random shares across three miners from different operators: none sees it, and only the client rebuilds the answer. A demonstrator already computes linear layers on shares.

    • Coming: Zero-knowledge inference

      A cryptographic proof that the inference ran, revealing neither the prompt nor the answer.

    Trusted hardware

    • Coming: Data-center enclave tierplanned

      Data-center hardware where the chip itself seals the prompt away from the machine’s owner.

    • Coming: Attestation on chainplanned

      Recognised fingerprints anchored on chain, so a confidential job can ask for an attested miner.

    Pseudonymous use

    • Ready: End-to-end from your device

      The user’s own client seals the prompt for the miners, so no gateway reads it.

    • Coming: Pseudonymous usage

      Single-use addresses per job, shielded payments, mixnet relaying and a log-free gateway.

    Show the Privacy cards

  • branch · Ecosystem

    The world builds on Dendra

    Apps, agents and contracts on verified AI.

    Build on Dendra

    • Coming: Dendra SDK

      Build on verified AI in a few lines; the SDK checks each answer’s on-chain proof for you.

    • Coming: Integrations

      Dendra inside the tools builders already use: agent frameworks, chat apps, developer tools.

    • Coming: Mobile app

      The wallet, the AI chat and your miner’s health, from your phone.

    AI for machines

    • Coming: Autonomous agents

      Agents that buy verified inference and pay for it in DNDR on their own.

    • Coming: Smart contracts

      On-chain applications that call verified AI and read its proof on chain.

    DNDR

    • Coming: DNDR on exchanges

      DNDR within reach of the builders, agents and miners who use it.

    Already in the protocol: Pays for inference, Staked to mine and to judge, Pays validators and their stakers, Part of every paid job burned, 10,000,000 fixed supply.

    Show the Ecosystem cards

Every technology, by status

Four statuses, from what runs today to what comes later. Open a card for one line on what it does, and where in the tree it grows.

Integrated

in the protocol and the kit

Verified AI

Each job’s fee is held until a random draw, seeded by the validators’ VRF, decides whether a jury of AI judges run by other miners audits it; a convicted miner loses part of its stake.

Seed · The protocol

Encrypted to the miner

The gateway seals each prompt to the serving miner’s key; the relay carries ciphertext only.

Seed · The protocol

Chat-completions API

Change one URL in any chat-completions client: every answer carries a proof block whose job id anyone can look up on chain.

Seed · The protocol

GPU mines, CPU judges

The kit picks the open model each NVIDIA card can serve, and a machine with enough system RAM judges. Miners prove their presence on chain, and only present miners are drawn for work.

Seed · The protocol

Fixed supply

10,000,000 DNDR and no mint module: the supply can only fall.

Seed · The protocol

Earn testnet DNDR

Mine on an NVIDIA GPU or judge on a CPU, and earn by a formula published in advance, computed in public and paid every seven season days.

Roots · Final Testnet Season

Points become mainnet DNDR

Each testnet DNDR the season pays you is one point, and each point becomes one mainnet DNDR, credited in the mainnet genesis to the address that received it.

Roots · Final Testnet Season

One miner per GPU card

As an option, each NVIDIA card in a rig can run its own miner identity, with its own stake and keys.

Roots · Final Testnet Season

Rented GPU pods and HiveOS

Mine from rented GPU pods and from HiveOS rigs, paid to an address you name.

Roots · Final Testnet Season

Protected keys and stake

The kit and its HiveOS package encrypt a new miner’s keys at rest, and owner mode keeps the stake on a key held on another device.

Roots · Final Testnet Season

Join as a validator

Guided scripts sync a node and bond it as a validator.

Roots · Final Testnet Season

Miner app and installers

A Linux desktop app shows and drives your miner; Windows installs through WSL 2.

Roots · Final Testnet Season

Judge on by default

A machine that can judge seats the judge when it installs or updates, with an option to decline. A seat without a judge never votes.

Roots · Final Testnet Season

Automatic updates, bounded

The kit checks once a day for a newer signed release of the same consensus epoch, prints its plan, updates, and goes back if the miner does not return. One setting turns it off.

Roots · Final Testnet Season

Signed releases

Each release tag and its list of checksums are signed with an offline key of the project, and the kit verifies a tag's signature whenever it installs a tagged release or updates.

Roots · Final Testnet Season

Judging

A CPU with enough system RAM already judges, with or without a GPU.

Power branch

Ready

built, to switch on

Probation for new identities

A new identity earns 60 percent of its season pay during its first full day. Its first jobs are audited more often once the chain parameter audit_probation_jobs is set above 0. It is announced before it applies.

Roots · Final Testnet Season

Open to independent validators

Starts on the project’s validator, then opens: independent validators join, and the work and audit draws are seeded by several of them.

Trunk · Mainnet

Availability rewards

On-chain pay for miners who stay available, and a liveness slash armed once a live run confirms it spares honest miners.

Trunk · Mainnet

Proven models

Every commit names a registered model and its anchored weights hash; miners sign a fingerprint of their code and weights, and confidential jobs can require it.

Trunk · Mainnet

End-to-end from your device

The user’s own client seals the prompt for the miners, so no gateway reads it.

Privacy branch

In development

first code exists

Confidential MPC mode

The prompt is split into random shares across three miners from different operators: none sees it, and only the client rebuilds the answer. A demonstrator already computes linear layers on shares.

Privacy branch

Coming

designed or planned; some wait on a measurement first

Mainnet launchplanned

Launches after the Final Testnet Season. The list of season points is published with its hash, so anyone can recompute it. Each miner’s owner then sets its payout address on chain.

Trunk · Mainnet

Permanent chainplanned

Never reset: every change after launch is an upgrade made in place, rehearsed on the testnet during the season.

Trunk · Mainnet

All in Go

The miner, the gateway, the relay and the judge move from Python to Go, the language the chain is written in: one codebase and one toolchain from the node to the miner.

Trunk · Mainnet

Multi-model networkplanned

Each request names its model and goes to the miners serving it; several cards in one machine pool to serve larger models.

Power branch

GPU pools and data centersdesigned

Operators pool GPUs to serve the largest models, and professional fleets join beside home rigs.

Power branch

Beyond textdesigned

Images first, as a verified-effort tier checked by a randomly drawn jury; then audio, video and embeddings.

Power branch

Fine-tuning

Improve existing open models with the network’s compute.

Power branch

A model grown by the network

Start from a small base model and grow it by training on every connected machine: GPUs, CPUs, RAM and storage.

Power branch

Exact recomputationdesigned

Deterministic inference gives the same bits on the same execution class: a peer re-runs the job and compares hashes, and a bisection fraud proof finds where two runs diverge. Juries stay the fallback.

Power branch

Judge diversitydesigned

Several distinct judge models required in every conviction.

Power branch

New CPU rolesplanned

Serving embeddings and small models, recomputation audits, community relays.

Power branch

Phones join the network

Light roles for phones: small models, checks and relays.

Power branch

Zero-knowledge inference

A cryptographic proof that the inference ran, revealing neither the prompt nor the answer.

Privacy branch

Data-center enclave tierplanned

Data-center hardware where the chip itself seals the prompt away from the machine’s owner.

Privacy branch

Attestation on chainplanned

Recognised fingerprints anchored on chain, so a confidential job can ask for an attested miner.

Privacy branch

Pseudonymous usage

Single-use addresses per job, shielded payments, mixnet relaying and a log-free gateway.

Privacy branch

Dendra SDK

Build on verified AI in a few lines; the SDK checks each answer’s on-chain proof for you.

Ecosystem branch

Integrations

Dendra inside the tools builders already use: agent frameworks, chat apps, developer tools.

Ecosystem branch

Mobile app

The wallet, the AI chat and your miner’s health, from your phone.

Ecosystem branch

Autonomous agents

Agents that buy verified inference and pay for it in DNDR on their own.

Ecosystem branch

Smart contracts

On-chain applications that call verified AI and read its proof on chain.

Ecosystem branch

DNDR on exchanges

DNDR within reach of the builders, agents and miners who use it.

Ecosystem branch

On every card that names a jury: a verdict needs audit_min_quorum jurors or two thirds of the anchored seats, whichever is larger, and the jury excludes the miner under audit (antievasion.go::auditRelativeBar).

Until the cards of the Privacy branch are integrated, the public gateway and the miner that answers read a prompt, and so do the jurors of a job drawn for audit.

Take part

Run a miner on an NVIDIA GPU or judge on a CPU, or ask the network a question in the chat.

Run a miner Open the chat