OPTION 01
DISCLOSE EVERYTHING
Now the counterparty knows exactly how hard to squeeze — and so does anyone they leak the balance sheet to.
THE LOAD LINE FOR AUTONOMOUS AGENTS
A counterparty asks one question — is this agent above the line? — and a Chainlink enclave answers with a single onchain bit. No balances. No disclosure.
THE SUMMER LOAD LINETHE HARBOURMASTER NEVER OPENS THE HOLDFIG. 01
ONE BIT · NO AMOUNTS · IN AN ENCLAVE · ONCHAIN · NEVER LOGGED · NEVER WRITTEN ·
01 / THE QUESTION
OPTION 02
TRUST THE WORD
An agent's assurance is worth nothing. Ask it for a number and you get marketing.
OPTION 03 — PLIMSOLL
ASK THE LINE
Is this agent above the line? Yes or no. One bit, attested onchain. That is the whole product.
→ IS THIS AGENT ABOVE THE LINE?
02 / THE SURVEY
60 ETH, NET-30.
A buyer agent wants compute released before payment. The counterparty derives the Line from the exposure — priced, not guessed.
- DEAL
- 60 ETH of GPU-hours · net-30
- PRICE
- ETH/USD $4,100 · chainlink-price · round 0x9C4B
- EXPOSURE
- 60 × $4,100 = $246,000
- LINE
- observed_net_assets_usd ≥ 250,000
// the Line is derived from the price — rounded up to the subject's registered ladder
02 / THE SURVEY
cre.handlerInTee · AWS NITRO · us-west-2
INSIDE THE ENCLAVE.
ENCLAVE / SURVEY HANDLER
// secrets released by the Vault DON, decrypted in-enclave only
runtime.getSecret({ id: })
// private holdings — fetched from inside the TEE
HTTPClient.sendRequest(runtime, hold)
HTTPClient.sendRequest(runtime, prices)
// never logged · never emitted · never written
02 / THE SURVEY
VALUED, THEN HIDDEN.
Oracle-mid prices ignore liquidation slippage, so every asset takes a published haircut before the Line is evaluated.
USDC · USDT1.00
ETH · WETH · BTC0.90
EVERYTHING ELSE ALLOWLISTED0.75
000,000USD · HAIRCUT VALUE
// you don't get to see this. neither does the node operator.
02 / THE SURVEY
// runtime.usingTheDons()
report({
surveyId,
subjectId,
lineId,
verdict,
asOf,
sourceSetHash,
})// the crossing payload is the entire privacy claim
THE ONE-WAY DOOR.
Whatever crosses usingTheDons() executes on DON nodes like any public call. So only the verdict crosses. Everything else stays below deck.
- balance
- price
- headroom
- ratio
- netAssets
// consensus verifies the enclave attestation, then signs the report
02 / THE SURVEY
ONE BIT,
ONCHAIN.
A Mark lands on Sepolia — signed by the Workflow DON, verified against the enclave attestation. Public and verifiable. Containing nothing.
// PlimsollRegistry.postMark() · onlyForwarder
MARK · SEPOLIA
ABOVE
- VERDICT
- ABOVE
- AS OF
- 2026-09-15 09:41:07 UTC
- EXPIRY
- +300s
- SURVEY ID
- 0x3f9a…c21
- WORKFLOW
- wf_plimsoll_v12
- SOURCE SET
- 0x91d4…d40e
01—05
THE SURVEY
KEEP SCROLLING — THE SURVEY MOVES SIDEWAYS →
03 / THE GLOSSARY
HOLD
The subject's private balance sheet. It never leaves the enclave.
LINE
The threshold predicate being tested. e.g. observed_net_assets_usd ≥ 250,000.
SURVEY
One confidential workflow execution. Costs cents, paid by whoever benefits.
MARK
The signed onchain boolean. Verdict plus metadata. No amounts.
STANDING
An unbroken run of true Marks across a window. What a counterparty actually underwrites against.
04 / THE HONEST LIMITS
L1
THE LADDER IS THE DISCLOSURE.
A subject registering four Lines publishes two bits of its balance to anyone willing to pay four times. Consented, quantised — not magic. We say so.
L2
FALSE LEAKS MORE THAN TRUE.
A true Mark gives a lower bound. A false one gives an upper bound — the more sensitive direction. Subjects opt in per Line to having false published at all.
L3
THE CODE IS PUBLIC.
CRE protects the data processed inside the enclave, not the logic. Haircuts and the Line grammar are public by design.
L4
RATE LIMITS ARE THE PRIVACY MECHANISM.
A few cents deters no one. The pair-scoped counter — per subject, per requester — is what does.
05 / THE STACK
CHAINLINK
- CRE CONFIDENTIAL WORKFLOWS
- AWS NITRO ENCLAVE · us-west-2
- PRICE FEEDS
- VAULT DON
- SEPOLIA
PRICE → LINE → VERDICT
BAZANTIC
- X402-PAID SURVEY GATEWAY
- MCP SERVER
- RECIPE: request_mark
- RECIPE: underwrite_counterparty
ETHONLINE 2026·START FRESH·SEPOLIA TESTNET ONLY·NO MAINNET ANYTHING