A drop-in OpenAI API on a sovereign L1: every answer carries a proof block anchored on-chain, a sample is re-audited by an LLM-judge committee, and a cheating miner is slashed — automatically.
# any OpenAI client — only base_url changes client = OpenAI(base_url="https://dendranetwork.com/v1") r = client.chat.completions.create(model="dendra-network", …) r.model_extra["dendra"] # the proof block { "job_id": "job_…", // on-chain anchor "committee": ["m-…"], // VRF-drawn "audit_state": "pending", // audit lands later, on The Proof "cost_udndr": 650, "verify": { "query": "dendrad query jobs get-job job_…" } }
Point any OpenAI-compatible client at the gateway. Every answer settles on-chain; a VRF-drawn sample is re-audited afterwards. The chain never sees your content.
The client encrypts the prompt to the miner's key and sends it via the OpenAI-compatible gateway. The chain sees only a fee and a job id.
The fee is escrowed in a module account. An unpredictable on-chain VRF beacon (anti-grinding) assigns the job — the requester can't pick its friends.
The assigned miner runs the model on its GPU and is paid optimistically. Plaintext exists only in RAM during compute, behind sealed-memory and egress guards.
A random share of jobs is re-checked by a fresh, VRF-selected committee that judges the answer with an LLM. A wrong — or silent — miner is slashed hard.
It's the OpenAI API — change base_url and every response carries a proof block your code can act on. Settlement is on-chain for every answer; the audit lands on a sample (~10%, VRF-drawn).
A slash is invisible inside a normal chat — so we put it on the table. The explorer below reads the chain and lists audited jobs and real slashes, live. It's the one thing no closed model can show you.
Every record here is a real, replayable on-chain event, read live from the network — audited jobs and the slashes that back every answer.
Every record here is independently replayable: pull the chain, re-run the audit, get the same verdict.
The client isn't a person reading a chat — it's a program about to act. Dendra gives that program a proof to check before it trusts, backed by stake it can watch get slashed.
An agent that spends, signs, or triggers workflows shouldn't act on an answer it can't check. Read the dendra block, gate the action on the audit state, and let slashing price dishonesty out.
Feed downstream protocols answers that settle on-chain and can be re-audited by a committee. The verdict is public and replayable — an economic backstop your feed can reference in code.
Classification, extraction, moderation at volume — spot-audited by the network itself, so output quality is enforced by economics rather than spot-checks you have to run yourself.
Prompts are end-to-end encrypted to the serving GPU — plaintext never touches the chain, the relay, or logs. An opt-in datacenter tier adds a hardware secure enclave for regulated data.
We're onboarding a small group of early design partners while the network hardens. Enterprise SLAs and an external audit ship with the production network — and we'll be straight with you about what's ready today.
The chat is the network's showcase: every reply carries its verifiability panel — job id, committee, real cost, and the exact command to re-check it on-chain. Capacity varies with the network.
End-to-end encrypted client↔miner (X25519 ECDH + AES-256-GCM) — nothing in clear at the relay or on-chain. On consumer GPUs the miner decrypts in RAM to compute, guarded by sealed memory, egress and disk guards, software attestation and slashing.
On datacenter GPUs (NVIDIA Hopper / Blackwell), inference can run inside a hardware secure enclave for cryptographic confidentiality — an opt-in tier for regulated workloads.
Proof-of-Work burns gigawatts on meaningless hashes. Dendra secures a market for what people actually want from GPUs today: AI inference — done privately, verified statistically, and paid for under an honest-stake majority.
Miners are GPU owners running a real LLM. The work the chain rewards is verified inference for paying clients — not hashing. A consumer GPU is enough to take part.
Prompts are end-to-end encrypted client↔miner (X25519 + AES-256-GCM). The relay and the chain only ever see hashes, embeddings and metadata — never your content.
Most jobs settle instantly. A random sample is re-checked by a fresh, VRF-selected committee that judges the answer with an LLM — and a wrong answer is slashed hard. Cheating is made loss-making, not merely discouraged.
$DNDR is what you pay for inference and what miners earn. A hard 10M cap, with every reward released from a pre-allocated Reserve — never minted into existence.
Base unit udndr · 1 DNDR = 1,000,000 udndr. A 4,000-run Monte-Carlo of the model keeps supply ≤ 10M in 100% of runs.
Dendra is open source. Spin up a node on a consumer GPU, send a real prompt through the network, and watch it settle on-chain. You're paid from real job fees — honest work is rewarded, lazy or wrong work is slashed.
Season 0 — early operators earn points: provisional, recalculable from chain state.
A real network with the full inference economy on-chain — every layer below is live and open source.
Build the hard part first — a chain that provably slashes cheaters. Then open it, grow the GPU community, and take verifiable AI to business. Here's the path, honestly.
On-chain escrow, VRF assignment, optimistic verification with an LLM judge, replay-safe settlement, real-coin emission, bonds and burn — with hard slashing proven live on-chain, zero honest miners penalized.
A public testnet anyone can join, a live on-chain “Proof” feed, an OpenAI-compatible chat, content filtering at the gateway, and monetization with buy & burn on real revenue.
One-click miners for community GPU owners, throughput measured on a real multi-validator network, and a broad, cross-hardware operator set.
A hardware-isolated privacy tier, an external audit and SLAs, and auditable, slashable inference for companies that must prove their AI. Image generation joins here, behind the same verification bar.
Decentralized across many independent operators, secured by everything above — shipped when it's right, not before.