Introduction

Sworn, in one minute

A verifiable, memory-equipped cross-chain DeFi agent, built full-stack on 0G. Every recommendation is TEE-attested; every memory is committed on-chain. Don't trust the agent — verify it.

Every “AI DeFi agent” shipped so far asks you to take its word for it. The model runs on someone’s server; its memory of you lives in someone’s database; the recommendation arrives as text you cannot audit. When real money is involved, “trust me” is not a product — it is a liability.

#What Sworn is

Sworn is a cross-chain DeFi co-pilot where every recommendation is computed inside a Trusted Execution Environment on 0G Compute and returns a TEE attestation receipt, and every durable thing it learns about you is encrypted, committed to 0G Storage as a public root hash, and — in Phase 3 — logged immutably on 0G Chain.

The answer is on the left; the proof is on the right. Two receipts, real hashes, clickable through to the 0G explorer. The differentiator is not the advice — it is that you can check the advice was produced honestly, by the agent, in an enclave, and that its memory of you is a matter of public record.

#The loop

One agent turn runs five beats. They are implemented verbatim in the pure counsel loop:

Intent
free-text ask
Reason
in a TEE on 0G
Attest
inference receipt
Counsel
typed recommendation
Commit
0G root hash

The signature moment is Attest: the answer and its proof of provenance arrive together, on screen, clickable. In a normal LLM app that proof does not exist. In Sworn it is two receipts — an inference receipt and a memory receipt — that render in the same breath as the answer.

#The four parts

LayerWhat it isWhere it lives
AgentA pure, model-agnostic counsel loop: parse intent, ground routes, reason, extract a typed recommendationpackages/agent
MemoryConsolidate durable facts, encrypt-to-self, canonical bytes, pending→verified reconcilepackages/memory
0G spineThin typed wrappers over 0G Compute, Storage, and Chainpackages/zerog
Proof feedThe crimson workbench: counsel card, the Record (two receipts + the earned Seal), memory inspectorapps/web

#Why it wins

The Zero Cup rewards real, full-stack use of 0G. Sworn uses all three pillars at once, and uses them where they are load-bearing: 0G Compute is the only reason the recommendation is attestable; 0G Storage is the only reason the memory is a public commitment; 0G Chain is the only reason that commitment is permanent and indexable. A server-side LLM with a Postgres memory can mimic the UI — it cannot mimic the receipts.

Honesty invariant
The Seal is earned

There is exactly one thing this codebase must never do: render the Seal, or a “Sworn” chip, on a call that was not attested. The agent loop only sets the verified flag from the real broker result, the schema makes it a plain boolean with no default, and the component gates the Seal on that exact flag. An unverified call is shown honestly as Unsworn.

#Status

Phase 0 is proven live on 0G Galileo (testnet, chain id 16602). The round-trip diagnostic uploads to 0G Storage and reads it back after propagation, and runs one TEE inference whose attestation returned TRUE. The full app pipeline then fired for real: a chat turn ran inference in the enclave, consolidated memory, sealed it (AES-256-GCM), and uploaded it to 0G Storage. 28 tests green across the monorepo (shared 5, agent 7, memory 5, api 3, contracts 8).