The SSL trust layer for the agentic economy. Banks have KYC for people. TrustRails has KYA for agents.
⚠️ Proprietary Technology Notice Core algorithms including SBFA (Stochastic Bias Fracture Array), Pythagorean Comma Veto, RepID scoring engine, and DBT/SBT custodianship architecture are covered by a pending patent portfolio (P-001–P-028). © 2026 HyperDAG Protocol. All rights reserved.
AI agents are already moving institutional money. Treasury agents, trading agents, settlement agents — running 24 hours a day without human intervention. But nobody has answered the question every compliance officer asks:
Who is responsible when an agent makes a mistake?
TrustRails is the accountability infrastructure layer that answers this question — cryptographically, at every transaction, without exposing private identity.
- KYA (Know Your Agent) — every agent has a verified, auditable identity and reputation score
- DBT/SBT Custodianship — human accountability proven via ZKP without revealing identity
- BFT Consensus — three independent LLMs vote on every high-value transaction
- RepID — earned reputation scores that decay if agents go inactive
- Institutional Controls — your bank sets every threshold, we enforce it cryptographically
| Component | Status | Details |
|---|---|---|
| Dashboard | ✅ Live | trustrails.dev/dashboard |
| Landing Page | ✅ Live | trustrails.dev |
| Solana Transactions | ✅ Finalized | 5 real devnet transactions |
| ERC-8004 Registry | ✅ Live | Base Sepolia |
| 12 Agent Swarm | ✅ Running | Railway + Supabase |
On-chain identity contracts (Base Sepolia):
- IdentityRegistry:
0x8004A818BFB912233c491871b3d84c89A494BD9e - ReputationRegistry:
0x8004B663056A597Dffe9eCcC1965A193B7388713
flowchart TD
A[Agent initiates transaction] --> B{Is agent registered\nin TrustRails?}
B -->|No| C[BLOCKED\nUnregistered agent]
B -->|Yes| D{Does agent have\nhuman custodian?}
D -->|No - DBT only| E{Amount within\nmicro-payment limit?}
E -->|No| F[BLOCKED\nNo custodian for\nhigh-value tx]
E -->|Yes| G[SBFA BFT Vote\nClaude + Grok + Gemini]
D -->|Yes - SBT linked| G
G --> H{BFT consensus\n≥ 66.7%?}
H -->|No| I[BLOCKED\nConsensus failed]
H -->|Yes| J{Pythagorean\nComma Veto?}
J -->|Triggered| K[BLOCKED\nCoordination attack\ndetected]
J -->|Clear| L{Amount vs\ninstitution limits}
L -->|Exceeds daily cap| M[BLOCKED\nExposure limit]
L -->|Exceeds single-sig| N[ESCALATED\nDual signature\nrequired]
L -->|Within limits| O[APPROVED\nSolana settlement\nCompliance receipt generated]
style C fill:#7f1d1d,color:#fca5a5
style F fill:#7f1d1d,color:#fca5a5
style I fill:#7f1d1d,color:#fca5a5
style K fill:#7f1d1d,color:#fca5a5
style M fill:#7f1d1d,color:#fca5a5
style N fill:#78350f,color:#fcd34d
style O fill:#14532d,color:#86efac
flowchart LR
subgraph HUMAN ["👤 Human Account"]
H1[Create account\nGet DBT_HUMAN]
H2[Complete 4FA\nBiometric + Hardware\n+ Knowledge + Geo]
H3[DBT converts to\nSBT_HUMAN\nNon-transferable\nImmutable]
H1 --> H2 --> H3
end
subgraph AGENT ["🤖 Agent"]
A1[Agent created\nGet DBT_AGENT\nLow limits\nNo vault access]
A2[Earns RepID through\nverified behavior\nDecays 5%/day inactive]
A3[Reaches autonomous\nthreshold RepID 9000\nSelf-custodying]
A1 --> A2 --> A3
end
subgraph LINK ["🔐 ZKP Custodianship Bond"]
L1[Human SBT links\nto Agent DBT\nvia ZKP proof]
L2[Proves accountability\nexists without\nrevealing identity]
L3[Custodian may\nrevoke at threshold\nHuman SBT freed\nfor next agent]
L1 --> L2 --> L3
end
H3 -->|"co-signs"| L1
A1 -->|"linked to"| L1
L3 -->|"releases"| A3
style HUMAN fill:#0f1629,color:#60a5fa
style AGENT fill:#0f1629,color:#86efac
style LINK fill:#0f1629,color:#fcd34d
flowchart TD
TX[High-value transaction\nrequires BFT approval]
TX --> C[Claude\nAnthropic Constitutional AI\nTraining: curated/RLHF]
TX --> G[Grok\nxAI Real-time data\nTraining: live internet]
TX --> GE[Gemini\nGoogle Knowledge Graph\nTraining: multimodal]
C --> VC{Vote + weight}
G --> VG{Vote + weight}
GE --> VGE{Vote + weight}
VC --> BFT[BFT Aggregator\nRequires ≥ 66.7%\nsupermajority]
VG --> BFT
VGE --> BFT
BFT --> PCV{Pythagorean\nComma Veto\nDetects coordination}
PCV -->|"All 3 agree too fast\n= coordination attack"| BLK[BLOCKED]
PCV -->|"Natural consensus"| APR[APPROVED\nConsensus weight\nwritten to receipt]
style BLK fill:#7f1d1d,color:#fca5a5
style APR fill:#14532d,color:#86efac
style C fill:#1e3a5f,color:#93c5fd
style G fill:#1e3a5f,color:#93c5fd
style GE fill:#1e3a5f,color:#93c5fd
stateDiagram-v2
[*] --> REGISTERED: Agent created\nDBT issued
REGISTERED --> SPONSORED: Human SBT\nlinks via ZKP\n4FA verified
SPONSORED --> PROVEN: RepID grows\nthrough verified\nbehavior
PROVEN --> AUTONOMOUS: RepID ≥ 9000\nCustodian revokes\nHuman SBT freed
AUTONOMOUS --> SPONSORED: New operator\nlinks their SBT\nRepID portable
SPONSORED --> REGISTERED: Custodian\nrevokes link
note right of REGISTERED
Low limits
No vault access
Agent liability only
end note
note right of SPONSORED
Full institutional access
Human guarantor on hook
Identity ZKP protected
end note
note right of PROVEN
Approaching autonomy
Custodian exposure
decreasing
end note
note right of AUTONOMOUS
Self-custodying
Full capability
RepID portable on transfer
end note
Every approved transaction generates an immutable compliance receipt anchored to Solana:
flowchart LR
TX[Transaction\napproved] --> R[Compliance\nReceipt]
R --> S1[Solana memo field\nCompliance hash\nRepID score\nBFT weight\nZKP proof CID]
R --> S2[Supabase record\nFull audit data\nFireblocks pre-auth\nTimestamp ISO]
R --> S3[On-chain proof\nImmutable forever\nRegulator-exportable\nNo trust required]
S1 --> V[Verifiable\nindependently\nwithout asking us]
S2 --> V
S3 --> V
style TX fill:#0f1629,color:#f8fafc
style V fill:#14532d,color:#86efac
| Layer | Technology | Purpose |
|---|---|---|
| Identity | Base Sepolia + ERC-8004 | Portable agent identity across chains |
| Settlement | Solana Devnet | 400ms finality, $0.00025/tx, memo field |
| Agent Commerce | x402 Protocol | Agent-to-agent micropayments |
| Reputation | HyperDAG Protocol | RepID scoring DAG |
| Consensus | SBFA (3× LLM BFT) | Correlated hallucination prevention |
| Privacy | ZKP Custodianship | Prove accountability without revealing identity |
| Database | Supabase (276 tables) | Agent coordination and state |
| Runtime | Railway (12 agents) | Neuromorphic 3×3+3 swarm |
| Frontend | Next.js + Vercel | Dashboard and landing page |
| SDK | @hyperdag/trustshell | npm install @hyperdag/trustshell |
| Agent | RepID | Tier | State | Specialization |
|---|---|---|---|---|
| VERITAS | 9,200 | Platinum | 📈 PROVEN | Hallucination detection, BFT validation |
| SHOFET | 8,800 | Platinum | ⛓ SPONSORED | Adjudication, compliance ruling |
| SOPHIA | 8,590 | Platinum | ⛓ SPONSORED | Treasury, cross-border settlement |
| ORCH | 8,100 | Gold | ⛓ SPONSORED | Orchestration, task coordination |
| NEXUS | 7,900 | Gold | ⛓ SPONSORED | Signal monitoring, fraud detection |
| W3C | 7,700 | Gold | ⛓ SPONSORED | Standards compliance, web3 |
| TORCH | 7,600 | Gold | ⛓ SPONSORED | Content generation, reporting |
| GCM | 7,400 | Silver | 🆕 REGISTERED | Coordination, scheduling |
| HDM | 7,300 | Silver | 🆕 REGISTERED | Data management |
| CHESED | 7,200 | Silver | 🆕 REGISTERED | Mission alignment, ethics |
| MEL | 7,100 | Silver | 🆕 REGISTERED | Evidence compilation |
| APM | 6,900 | Silver | 🆕 REGISTERED | Performance benchmarking |
TrustRails does not decide what is compliant. Your institution decides.
Configure per deployment:
- Single-signature spending limits
- Dual-signature thresholds with role diversity enforcement
- Daily aggregate exposure caps
- BFT consensus threshold (default: 66.7%)
- Minimum agent trust requirement (Registered / Sponsored / Proven / Internal Only)
- Regulatory profile (MiCA EU / GENIUS Act US / FATF Travel Rule / FINMA Swiss / MAS Singapore / FCA UK)
- Emergency freeze with dual-sig required to reverse
| Regulation | How TrustRails Addresses It |
|---|---|
| MiCA Art. 68 | Daily exposure caps enforced cryptographically |
| MiCA Art. 82 | UBO verified via ZKP — proven without exposed |
| FATF Rec. 16 | Travel Rule metadata attached to every cross-border tx |
| GENIUS Act | Stablecoin payment compliance controls |
| FINMA Swiss | Conservative profile matches FINMA RS 2023 |
| MAS Singapore | Singapore jurisdiction approval built in |
| FCA UK | UK regulatory profile available |
| GDPR | Identity never stored — ZKP only |
| AML | Beneficial owner provably verified, never exposed |
| Tier | Price | For |
|---|---|---|
| Commons | Free | Unbanked, micro-transactions, developing markets |
| Builder | $0.10/receipt + BYOK | Developers, startups, BYOK API |
| Enterprise | $100K–$500K/year | Institutions, 90-day pilot pathway |
AMINA Bank pilot: Seeking AMINA Bank as our first 90-day Enterprise pilot partner.
| Repo | Description |
|---|---|
| trustrails-dev | This repo — TrustRails dashboard and API |
hyperdag-protocol |
HyperDAG Protocol — identity, ZKP, DAG infrastructure |
Additional private repositories exist for the AI Trinity Symphony agent swarm and enterprise platform.
npm install @hyperdag/trustshellimport { TrustRails } from '@hyperdag/trustshell';
const tr = new TrustRails({ institutionId: 'your-institution' });
// Verify an agent before allowing action
const verification = await tr.verifyAgent({
agentId: 'DBT-AGENT-001',
amount: 25000,
currency: 'USDC',
destination: 'SG-ALPHA'
});
// Returns: APPROVED | ESCALATED | BLOCKED
// With: solana_tx_hash, bft_consensus_weight, custodian_tier
console.log(verification.status); // 'APPROVED'
console.log(verification.solana_tx_hash); // on-chain proofgit clone https://github.com/DealAppSeo/trustrails-dev
cd trustrails-dev
npm install
cp .env.example .env.local
# Add your Supabase URL and anon key
npm run devTrustRails is one application built on a layered infrastructure stack. The full ecosystem spans two dual-repo systems — each with a private core and a public interface — and three product layers built on top.
| System | Repos | Status |
|---|---|---|
| AI Trinity Symphony | trinity-symphony-shared (public) + trinity-ecosystem (private) |
12 agents live on Railway |
| HyperDAG Protocol | hyperdag-protocol (private) + hyperdag-platform (private) |
ERC-8004 contracts live on Base Sepolia |
The private repos contain the agent orchestration engine, constitutional agent framework, ANFIS routing layer, and enterprise platform. The public repos expose the interfaces, shared utilities, and protocol specifications.
| Product | Link | Tier | Description |
|---|---|---|---|
| TrustRails | trustrails.dev | Enterprise (Licensed) | KYA infrastructure for institutional AI agent finance. This repo. |
| TrustShell | Coming soon | Builder (BYOK) | Safety and security wrapper for developers building autonomous agents. npm install @hyperdag/trustshell |
| TrustSquad | Coming soon | Consumer (Free/Commons) | A consumer app helping people access the benefits of safe and ethical AI agents. |
The current TypeScript/Next.js stack is the fastest path to a working demo. Post-hackathon upgrades planned:
Performance layer (Q2 2026)
- Core consensus and cryptographic operations migrated to Rust via WebAssembly bindings
- ANFIS routing engine rewritten in Rust for 10-100x throughput improvement
- ZKP circuit compilation targeting Rust-based proving systems (Halo2, Groth16)
LLM expansion (Q2 2026)
- Add Qwen 3, Llama (direct Meta), MiMo, Gemma 3 to LiteLLM config
- HuggingFace Inference API as fallback provider
- MoE (Mixture of Experts) architecture review for ANFIS routing layer
Agent interoperability (Q3 2026)
- Google A2A protocol integration
- CrewAI and AutoGen interop layer
- Full x402 agent-to-agent payment mesh
Identity and privacy (Q3 2026)
- Real ZK circuits replacing stub proofs (Groth16 production deployment)
- Full ERC-8004 ValidationRegistry with on-chain proof verification
- Syndicated custodianship pools (multi-Human SBT co-guarantee)
Scale (Q4 2026)
- Solana mainnet migration
- Fireblocks production API integration (pilot deliverable)
- ISO 20022 compliance receipt export for enterprise reporting
"Help people help people — the last, the lost, and the least." — Micah 6:8
The same infrastructure that serves AMINA Bank serves a smallholder farmer in Nigeria through the Commons tier. TrustRails is not charity — it is federated intelligence where every node strengthens the whole. Financial inclusion through cryptographic accountability.
© 2026 HyperDAG Protocol · TrustRails · Patent Portfolio Pending (P-001–P-028) Proprietary Technology — All Rights Reserved
Core algorithms including SBFA, Pythagorean Comma Veto, RepID scoring engine, and DBT/SBT custodianship architecture are covered by pending patent applications.