Sworn, in one minute
A verifiable, memory-equipped cross-chain DeFi agent, built full-stack on 0G. Every recommendation is TEE-attested; every memory is committed on-chain. Don't trust the agent — verify it.
Every “AI DeFi agent” shipped so far asks you to take its word for it. The model runs on someone’s server; its memory of you lives in someone’s database; the recommendation arrives as text you cannot audit. When real money is involved, “trust me” is not a product — it is a liability.
#What Sworn is
Sworn is a cross-chain DeFi co-pilot where every recommendation is computed inside a Trusted Execution Environment on 0G Compute and returns a TEE attestation receipt, and every durable thing it learns about you is encrypted, committed to 0G Storage as a public root hash, and — in Phase 3 — logged immutably on 0G Chain.
The answer is on the left; the proof is on the right. Two receipts, real hashes, clickable through to the 0G explorer. The differentiator is not the advice — it is that you can check the advice was produced honestly, by the agent, in an enclave, and that its memory of you is a matter of public record.
#The loop
One agent turn runs five beats. They are implemented verbatim in the pure counsel loop:
The signature moment is Attest: the answer and its proof of provenance arrive together, on screen, clickable. In a normal LLM app that proof does not exist. In Sworn it is two receipts — an inference receipt and a memory receipt — that render in the same breath as the answer.
#The four parts
| Layer | What it is | Where it lives |
|---|---|---|
| Agent | A pure, model-agnostic counsel loop: parse intent, ground routes, reason, extract a typed recommendation | packages/agent |
| Memory | Consolidate durable facts, encrypt-to-self, canonical bytes, pending→verified reconcile | packages/memory |
| 0G spine | Thin typed wrappers over 0G Compute, Storage, and Chain | packages/zerog |
| Proof feed | The crimson workbench: counsel card, the Record (two receipts + the earned Seal), memory inspector | apps/web |
#Why it wins
The Zero Cup rewards real, full-stack use of 0G. Sworn uses all three pillars at once, and uses them where they are load-bearing: 0G Compute is the only reason the recommendation is attestable; 0G Storage is the only reason the memory is a public commitment; 0G Chain is the only reason that commitment is permanent and indexable. A server-side LLM with a Postgres memory can mimic the UI — it cannot mimic the receipts.
There is exactly one thing this codebase must never do: render the Seal, or a “Sworn” chip, on a call that was not attested. The agent loop only sets the verified flag from the real broker result, the schema makes it a plain boolean with no default, and the component gates the Seal on that exact flag. An unverified call is shown honestly as Unsworn.
#Status
Phase 0 is proven live on 0G Galileo (testnet, chain id 16602). The round-trip diagnostic uploads to 0G Storage and reads it back after propagation, and runs one TEE inference whose attestation returned TRUE. The full app pipeline then fired for real: a chat turn ran inference in the enclave, consolidated memory, sealed it (AES-256-GCM), and uploaded it to 0G Storage. 28 tests green across the monorepo (shared 5, agent 7, memory 5, api 3, contracts 8).