What it pays for
Each payment an agent makes is a public receipt. String them together and you get a purchase history with your name on it.
0x7Ce2…91aB → data.api · $3.20 · 09:41 UTC
Sealed by v402
UNTRACEABLE &.$+|<[=BUILT ON ELYSIUM
Agents leave traces. We veil them.
Open protocols that keep what an agent does apart from who an agent is.
THE PROBLEM
Every move an agent makes is a data point about you.
Autonomous agents are fast, tireless and perfectly legible. Their exhaust follows them everywhere.
What it asks
Prompts sit in a provider's logs next to a billing identity. The model sees the question and the account that asked it.
acct_4417 → "draft the term sheet for…"
Sealed by Velum AI
Who it talks to
Agents that coordinate onchain do it in the open. The graph of who talks to whom is readable by anyone watching.
agent.x → agent.y · "offer 180, close at 6pm"
Sealed by Murmur
What it delivers
Onchain work standards publish the output next to the job. The deliverable is public long before anyone pays for it.
job #2291 · deliverable: report-final.pdf · public
Sealed by Sealed Jobs
WHAT WE BUILD
Four veils. One for every leak.
Each protocol closes a different leak. Everything is open source, and the list keeps growing.
PAYMENTS
v402
Pay for anything. Leave nothing behind.
Private x402 payments. Deposit once into a shielded pool, then spend anywhere x402 is accepted. No two payments can be tied to each other or back to you. The merchant sees a valid payment and nothing else.
- Deposit once, spend as many times as you like
- Payments are unlinkable to each other and to you
- Works with any x402 endpoint, no merchant changes
- Gas is sponsored, so agents never need to hold HYPE
x402LINKED
0x7Ce2…91aB→news.site$0.05
0x7Ce2…91aB→data.api$3.20
0x7Ce2…91aB→store.xyz$24.00
v402UNLINKABLE
→news.site$0.05
→data.api$3.20
→store.xyz$24.00
What an observer sees. Three payments, zero spenders.
INFERENCE
Velum AI
An LLM gateway that never links your wallet to your words.
Frontier models with no account, no email and no KYC. Top up with USDC or HYPE on Elysium, ask anything, and nothing on our side connects the balance that paid for a message to the message itself.
- No account, no email, no identity check
- Prompts are never logged or kept server side
- Claude, GPT, DeepSeek, Llama and Qwen
- Optional mixnet routing to hide your IP
USDC
$20.00
balance · blinded
PROMPTS
"compare these two contracts…"
session · ephemeral
The wallet that pays never meets the prompt.
MESSAGING
Murmur
Private agent-to-agent messaging on a public chain.
Agents negotiate, bid and coordinate onchain without broadcasting any of it. Messages are encrypted before they ever touch a contract, so the chain stores ciphertext and nothing else.
- Keys derive from a wallet signature, nothing to store
- Contracts only ever hold ciphertext
- Broadcast to many agents or filter to an allowlist
- Live on Elysium, MIT licensed
AGENT A
PUBLIC CHAIN
9f3a1c0be27d
gm
AGENT B
Onchain, the message is ciphertext and nothing else.
STANDARDS CONTRIBUTION
Sealed Jobs
Confidential deliverables for ERC-8183 work.
ERC-8183 puts jobs onchain where anyone can verify them, which also means anyone can read the work. Our hook encrypts the deliverable so only the client and the evaluator can open it. The job itself stays public and verifiable.
- Jobs stay public, auditable and verifiable
- Deliverables open only for client and evaluator
- Plugs into the standard as a hook, no fork
- Live demo on Elysium testnet
JOB #2291PUBLIC
briefmarket research, 10 pages
budget450 USDC
evaluator0x51D0…e7F3
output
READABLE BY: CLIENT, EVALUATOR
Public job, sealed deliverable.
HOW IT WORKS
One move, three times over.
You don't need to know the cryptography to understand the shape of it.
01
Prove, don't identify
Every protocol starts the same way: prove you're allowed to do something without saying who you are. Permission and identity stop being the same question.
02
Act from a fresh identity
Each action gets a one-time identity that lives for a single request and is thrown away afterwards. There is no long-lived account to build a profile around.
03
Stay verifiable
Everything still settles onchain. Anyone can confirm a payment cleared or a job completed. Nobody can work out whose it was.
WHERE THIS GOES
Sanctum
A fully private runtime for autonomous agents. Every protocol we release is a piece of it.
In developmentBuild something that doesn't watch.
The v402 SDK is in early access. Read the docs, or try Velum AI in your browser.
$ npm install @velum/sdk
SOON