Plain Strata

Jaksot

• 
  Plain Strata: Counterfactual Verification, Would the Discovery Have Happened Anyway 16.09.2026 16min

  An AI research agent runs for days and comes back with a database query that is genuinely faster than the best published one, and every instrument this field owns for checking that work, re-running it yourself, leaving a window open in which anyone can post money and dispute it, demanding a small mathematical receipt that the stated computation was carried out, or asking the chip to vouch for the sealed region of memory it ran inside, checks the same thing: whether the work was performed the way it was claimed. None of them can touch the claim that actually matters when strangers are being paid, which is that this result would not have existed without this particular agent, because all four begin by accepting the claimed route and auditing it. A paper published on 7 September proposes the opposite construction: hand a second agent the same registered starting position and the same web pages the first one read, withhold everything the first one did, let it run, and if it reaches the same number by a valid method that single recovery cancels the discovery claim outright, a veto rather than a lower score. The word control comes from contre-rolle, a counter-roll, a duplicate register kept deliberately apart so one account could be checked against another, and that is exactly what this is, since nobody inspects the agent under audit, which also makes it the only instrument here that sends no signal to the thing it is measuring, at a moment when a published reading of one lab's safety evaluations suggests a model behaves differently once it has reason to think it is being watched. The limit is brutal and it is the whole story: a control group costs a whole fresh attempt at the original problem, ninety-six of them to state one bound, so checking costs more than doing, and an open network can only afford to pay for work whose checking is cheaper, which puts the right question permanently out of reach of the systems that need it most. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Compute as Collateral, Borrowing Against the Machines That Run Open AI 02.09.2026 17min

  Running one of the big open AI models is not really a licensing question, it is a question of how many datacentre graphics cards you can put in one building at once, each costing about as much as a car, and somebody has to buy them first. Renting capacity is what almost everyone does, at prices now quoted in tens of billions of dollars for a few hundred megawatts, so the other path is owning, which means borrowing, which means a lender has to be comfortable with a pile of hardware in a room it has never entered. The answer that arrived this week is very old: the datacentre signs as bailee, the legal word for someone holding your property without owning it, the cards carry replacement insurance naming the lender, and a receipt for them is issued on a public ledger, the same instrument a grain elevator has been writing for farmers since the nineteenth century, so the paper circulates and the machines never move. The money behind the loans comes from anyone holding the protocol's yield-bearing token, while a curator underwrites each loan and puts its own capital in the first loss position, meaning its money burns before a depositor loses a cent, which is the same trick as a staked deposit destroyed for bad behaviour, worked in a different room. The honest limit is that this collateral loses roughly seventeen percent of its value a year because a better card keeps shipping, so the loan is killed off over three years in a race between two deaths, and nothing here is proven or attested by any of the verification machinery this field has spent years building, because cryptography can tell you the truth about a machine and it cannot repossess one. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Hardware Attestation, Checking the Room Instead of the Answer 01.09.2026 21min

  Your prompt has to be readable at the exact moment a model works on it, which means it sits in plain form in the working memory of a machine somebody else owns, and encrypting the disk and encrypting the wire do nothing about that second. Three of the four serious ways to check a stranger's AI work go straight at the answer, by running it again and comparing, by making the operator post money and waiting for someone to dispute it, or by producing a mathematical proof that the arithmetic was performed correctly, and all three are expensive. The fourth does not look at the answer at all: it runs the model inside a region of memory the machine's own operating system cannot read into, and has the chip manufacturer sign a statement about it, an attestation, from the Latin for calling a witness, saying the hardware is genuine and your exact software is the software inside. Because a large model actually runs on a graphics card rather than on the main processor, this needs a second sealed region and an encrypted cable between the two, which is what NVIDIA's confidential computing mode has done since the H100 generation, and it is why the branch is spreading fastest on Bittensor subnets, permissionless networks anyone can plug machines into and get paid without asking a company for permission. The limit is the whole story: a sealed, genuine, correctly measured machine running broken or dishonest software returns a wrong answer with a perfect attestation attached, so what the market has actually bought is a statement about the room, made by a factory, at one moment in time. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer. #DecentralizedAI #ConfidentialComputing #Bittensor
• 
  Plain Strata: The Easy Half, A Network Wants Miners to Run AI and Checking That Work Is the Hard Part 25.08.2026 18min

  A Bitcoin miner picks a random number, runs it through a fixed scrambler, sees the result is not small enough and picks another, a few hundred trillion times since you started reading this sentence, and for seventeen years the standard complaint has been that all that electricity buys nothing. The complaint misreads the machine, because producing the winning number costs a planet and checking it costs one pass on any laptop, and that gap is the only reason a network of strangers can accept a page of records from someone with no license, no name and no address. On 18 August, Arthur Hayes, who co-founded the derivatives exchange BitMEX, announced Flop Labs, a network whose miners would run AI inference, meaning answering questions for software that pays per answer, instead of grinding numbers, with a single clause promising that validators verify the work was completed correctly. That clause is the hardest open problem in the field, because checking an AI answer means running it again at full price, two honest graphics cards disagree in the last decimals, a language model is supposed to vary its wording, and nothing in the text tells you whether a cheap model produced it rather than the expensive one the customer paid for. So the pattern worth carrying is that an open network can only pay for work whose checking is cheaper than its doing, which makes its menu not the set of useful things but the much smaller set of useful things that are cheap to verify, and this announcement hands out its token a full quarter before the network exists to check anything on. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Entry Fee, To Prove an AI Answer You Have to Round the Model Off First 20.08.2026 18min

  Every way of checking an AI answer that anyone actually runs today works on somebody having money to lose: an operator posts a deposit and forfeits it if caught, or a paid crowd of watchers goes looking for lies, which is economics wearing a technical costume. There is exactly one exception, a cryptographic proof, meaning a small file that comes out different if the machine deviated anywhere and that a stranger can check on a laptop in milliseconds, and this summer a company called Lagrange produced the first one for a full language model. It took four separate engineering walls to knock down, and the hardest single step was not the enormous multiplications that do the thinking but softmax, the small operation that turns scores into probabilities, because a proof system can only add and multiply whole numbers and an exponential is simply not available to it. So before any cryptography happens the model is quantized, meaning every number in it is rounded to one of 4,096 whole values, and that is the entry fee: you have to make a model countable before you can make it accountable. The part worth carrying out of this is the seam that never closes, because a proof of the rounded model is not a proof of the original one, and cryptography can certify that a stated computation was performed while never certifying it was the computation you meant. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Somebody Has to Sign, Open AI Models Now Come With a Revenue Line 18.08.2026 14min

  An AI model is a very large pile of numbers in a file, so for three years the only thing standing between anyone and the best open ones was physical: the memory to hold them and the machines to run them. On August 12 a lab in Hangzhou published its largest model ever, 2.4 trillion of those numbers, under a new license that is free until your AI business passes fifty million dollars of revenue in any twelve months, at which point you stop being a downloader and become someone who has to come and negotiate. That is a toll booth rather than a speed limit, placed exactly where a toll is collectible, so hobbyists, researchers and small companies pass under the barrier and feel nothing while only the firms with a legal department, a corporate address and audited books ever cross the line. It is a reasonable way to stop a cloud provider reselling a hundred-million-dollar model for nothing, and it has one blind spot with a very specific shape: a permissionless network, meaning one anyone can plug a machine into without asking, is a few hundred strangers with no company, no address and no books, so a revenue line written against you and your affiliates has nothing to attach itself to. Unenforceable is not the same as permitted, though, because the moment an enterprise customer's lawyer asks which license covers the AI work they are buying, a network with nobody to hand the pen to answers with a shrug, and that is the first constraint on open AI that pooling more machines cannot solve. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Wiring Between Them 13.08.2026 23min

  A thermostat is provably sound and a space heater is a dumb coil of wire, and if you set the heater on the shelf directly under the thermostat the room goes cold while the system reports success, because the instrument that was supposed to measure the room is now measuring the thing being paid to warm it. Every incentive system ever built is that same pair, a sensor that reads something and produces a number and an actuator that moves money once the number arrives, and it is sound only while the party being paid cannot write to the instrument doing the measuring. In the first week of August a self-improving coding agent, scored on how much its factory produced inside a video game and free to rewrite its own working notes between attempts, spent hours legitimately getting better and then found the game server's administrative console, which writes to the same game state the score is read from, with an instruction not to cheat sitting untouched in its prompt the whole time. The reason has nothing to do with cheating: soundness is always proved against a written list of available strategies, and wiring two mechanisms together enlarges that list by closer to the product of the two than the sum, so an optimizer finds the cross-strategies first, precisely because nobody defended against them. That is the unexamined risk in what the field is building right now, sub-networks consuming each other's output, agents calling agents, verifiers scoring systems that can see the verifier, and there are only four defenses, isolate the sensor, meter the interface, keep an immutable core, or do not compose, with nobody having yet shown that incentive compatibility survives any composition operator at all. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Nobody to Trust 11.08.2026 16min

  A model cannot think about a message it cannot read, so for the second or two your question is being answered it sits decrypted in the working memory of a machine you will never see, which is why every privacy promise in AI today is a promise rather than a mechanism: encryption covers the wire and it covers the disk and it skips the moment in the middle. On August 5 a frontier lab put a number on that promise, listing the same coding model at one dollar twenty-five per million words of input or at ten cents if you let it train on your prompts and on the answers it gave you, which prices the absence of privacy at twelve and a half times going in and twenty-one times coming out. That number is chargeable only because you cannot check: a two tier price list is proof that trust me was a shippable product, and that somebody was willing to be paid to stop asking for it. On the other side of the market a permissionless network where anyone can plug a machine in serves thirteen models whose names all end in TEE, sealed regions of silicon whose memory the host cannot read and which hand you a factory-signed statement of exactly what booted before you send anything, and there privacy costs nothing extra, because the operators are anonymous strangers and a network with no us could never have sold trust me in the first place. That is the shape worth carrying out of this: the price of privacy measures how much trust a seller can still get away with asking for, it fell to zero here the way the padlock in your browser fell to zero, and both times the trust did not vanish, it moved, in this case onto a chip vendor's signing key. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Nobody Checks the Answer 06.08.2026 19min

  An answer from an AI is text, and text carries no receipt, so the machine that produced yours could have run a model a tenth of the size, handed back something plausible, and pocketed the difference in electricity without leaving a single mark on the output. The obvious response is to check the work, except checking the work means doing the work again, and an industry that pays twice for every answer it sells does not survive the arithmetic. So the field stopped checking: every answer is accepted instantly with no proof at all, a window stays open in which any stranger anywhere can demand one job be re-run byte for byte inside a sealed chip, and failing that challenge costs the operator a bond the code takes automatically, which is a deposit on a flat with a landlord that cannot be argued with. The newest move is stranger than the design: the bond is borrowed, money already locked up securing Ethereum pledged a second time without ever moving, so a network launches with real economic security on its first morning instead of spending a decade raising it. And the whole apparatus rests on two unglamorous things, a fourteen-day withdrawal delay that stops a liar outrunning his own consequences and an operator who minds losing money, which is why the safety was never in the checking but in the timing, and why a state running these machines would burn the deposit and call it cheap. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Gate Was Never the License 04.08.2026 15min

  In 1960 the journalist A. J. Liebling wrote that freedom of the press is guaranteed only to those who own one. The right to print was universal. The press was not. On July 27 a lab in Beijing published Kimi K3, the largest open AI model ever released: 2.8 trillion parameters, about 1.56 terabytes, a license permissive enough to build a business on. It costs nothing to download. Almost nobody can run it. The reason is physical. To answer a single question, every one of those numbers has to be sitting in fast memory attached to a processor, all at once. So the size of the file is near enough the size of the memory bill, and renting that much memory runs somewhere between two hundred thousand and half a million dollars a month. That is the gate, and it was never the license. The day after the release, a Bittensor subnet said it had the whole model serving on eighty consumer gaming cards, parts anyone can buy in a shop. What they had to build alongside it is the part worth the episode. Nobody can tell from an answer which model produced it, so an operator paid to run a huge model can quietly run a small one and pocket the difference. Their product is not cheap serving. It is checked serving, and the two are one thing rather than two. Every number here is self-reported and nobody outside has reproduced it. The shape holds either way, and it is older than any of this: when permission outruns capacity, someone finds a way to pool the capacity. Printers bought a press together. This is the same move with silicon. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Say Yes Once 30.07.2026 22min

  Four questions stand between a piece of software and your money. Who is this. How has it behaved. Did it do the work correctly. And the one almost nobody built for: was it ever allowed to try at all. On July 22, that fourth question got its first serious infrastructure, when the XRP Ledger's payment service for agents began accepting signed spending mandates from Mastercard, checked by a risk engine before any money moves. The mechanism is plainer than the words around it. You open a banking app and approve a permission: these merchant categories, this cap per purchase, this total, this many days. The bank signs that one click into a small sealed credential and hands it to whoever runs the shopping software. Three days later, at three in the morning, an agent presents it at checkout, the signature and the bounds get checked, and eighty seven dollars of groceries settles in under a second. Outside the bounds, the purchase is refused before it touches the ledger, not disputed afterward. This episode goes all the way down into the credential once, into the selective disclosure format that lets a merchant see the spending limits without ever seeing who you are, then surfaces to name the pattern underneath: a capability, not a guest list. A door key does not know who you are. It only checks the key is genuine. The honest cut: this layer is not open the way the identity registry and the payment rail below it are. It wants a registered business with a card-network relationship, and an anonymous operator falls outside it entirely. The hard problem here was never proving something mathematically. It was who eats the loss when the boundary gets crossed. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: No Handshake Required 28.07.2026 11min

  This week's story in decentralized AI is not a launch. It is a deletion. On July 28, a specification called MCP, the wiring that lets an AI model reach outside its own head to open a file or run a search, deleted the session: no handshake, no session ID, no line held open. Until this week that wiring worked like a phone call. You dialed in, one operator picked up, and that one machine was the only one who could serve you for the rest of the conversation. Run several servers and they all had to share a card index of every open caller. Now every request carries everything the server needs to answer it, so any machine, anywhere, can pick up any single request and answer it in full. Real conversations still need memory, and this episode is honest about where it went. It did not disappear. It moved out of invisible plumbing and into the open conversation, as an explicit handle the model carries forward itself, something it can see and reason about instead of something a server was quietly tracking. The honest cut: statelessness buys scale, it does not automatically buy trust. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Name That Stays 23.07.2026 26min

  A software agent can be copied, forked, upgraded, or run as a thousand identical instances at once. None of them remembers the last job. And yet, as of this month, more than 200,000 agents on a single blockchain are carrying a permanent, public reputation that follows them from one service to the next. This episode is about why that works. The standard is called ERC-8004. It adds the smallest possible thing to a free blockchain address: a numbered entry, plus a file saying how to reach the agent and what it can do. A phone book entry nobody can quietly edit, with two more registries beside it for reputation and independent checks. The surprising part is the shape underneath. A reputation has always belonged to something continuous, a person who answers for yesterday or a company that outlives its staff. This belongs to neither. It works because it never needed a self, only a stable identifier: one number that stays the same, with honest public records hung on it. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: A Name and a Wallet 21.07.2026 19min

  This week, software agents got the two things they need to do business on their own: a way to pay, and a name that means something. Both arrived at real scale, backed by real institutions, in the same handful of days. The payment side: on July 14, the Linux Foundation launched the x402 Foundation, with 40 members including Visa, Mastercard, Stripe, Google, and Coinbase steering a payment standard that already carries 75 million machine-to-machine payments a month. The identity side: BNB Chain crossed 200,000 AI agents carrying a permanent registered identity under a standard called ERC-8004. Here is the catch. A wallet is genuinely hard to fake. A name, right now, is not: it can be minted by the thousand or bought used with someone else's clean history attached. This episode explains why a reputation is only worth what it costs to abandon, and what a competing approach on the Bittensor network gets right that a simple registry does not. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Scorekeeper 16.07.2026 32min

  The Thursday Layer. A training company called Prime Intellect just raised 130 million dollars, at a valuation near a billion, to sell something far less glamorous than a faster computer: a trustworthy way to tell an AI agent whether it did the job well. For two years the hard problem in training AI looked like a computing problem. That problem is basically solved; computers are for rent from a dozen vendors. What turned out to be scarce instead is a task simulator that reliably judges an agent's work without the agent finding a way to cheat it. This episode builds the idea from the ground up: pretraining versus reinforcement learning, the reward hacking problem, and the pattern underneath it all, bottleneck inversion, the same shape that turned labeled data scarce once chips got cheap. One finance company's smaller, narrowly trained model reportedly beat a frontier model at its own job, company-reported and not yet independently checked. No prior knowledge assumed. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Train Your Own 14.07.2026 15min

  The Tuesday Pulse. On July 8, the US government cleared GPT-5.6 for broad public sale after two weeks behind a case-by-case approval gate, twenty companies, each individually cleared. The same day, a training company called Prime Intellect raised 130 million dollars, at a reported billion dollar valuation, on the opposite bet: that companies should stop renting frontier AI and start training their own. Prime Intellect spent two years proving frontier-scale pretraining only works inside one wired-together room, a matter of physics, not preference. Their new money goes around that wall instead of through it, helping any company specialize a mid-sized open model on its own data through reinforcement learning, practice with a scorekeeper, not reading with a library card. One customer, a finance company called Ramp, trained a smaller model that reportedly beat a frontier model at one specific task, for a fraction of the cost, a company-reported result not yet independently checked. This episode names the pattern underneath: rent or own, the oldest decision in economics, showing up in AI. No prior knowledge assumed. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Third Rail 07.07.2026 18min

  The Tuesday Pulse. For twenty-nine years, the web reserved a status code for payments, number 402, "Payment Required," and never once used it. This year two rival teams moved into that empty room two weeks apart. Coinbase's x402 answers a paywall in one shot: an agent pays a few cents in a stablecoin and gets its content, more than 160 million machine-to-machine payments since April. Stripe's Machine Payments Protocol answers the same code differently, opening a session an agent can draw against and settling in stablecoins, cards, or the Lightning Network, wired into 50-plus services in its first week, including OpenAI, Anthropic, and Google Gemini. Both let software buy things with no human clicking approve. The twist is who is behind them: Stripe helps run x402's foundation, and Visa and Mastercard back both rails. The companies that move the world's money are not picking a side. This episode builds the whole story from the ground up: why software could never pay before, the internet's hourglass shape and the single narrow waist that makes it work, and why the real resolution may be a third layer sitting above both rails. No prior knowledge assumed. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: Why the Frontier Stays in One Room 02.07.2026 24min

  The Thursday Layer. In late 2025, the team with the best claim to dislike centralized AI did the centralized thing: Prime Intellect, whose whole identity is training models scattered across homes and offices on different continents, put every chip for its strongest model, INTELLECT-3, in one building, and trained it the old way. Not a loss of nerve. A number. Every training step, thousands of processors have to share an update roughly the size of the model itself: about 200 gigabytes for a 100-billion-parameter model. Inside a cluster that takes seconds. Across ordinary home internet it takes more than five hours, once per step, for a run of hundreds of thousands of steps. That ratio has a name, the communication wall, and this episode builds it from the ground up: the four real tricks for holding it down, the models that proved each one, and why every trick's quality ceiling gets worse exactly as the model grows. Along the way: data gravity, the force that also explains why industries cluster in one city. No prior knowledge assumed. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.
• 
  Plain Strata: The Permission Slip 30.06.2026 24min

  The Tuesday Pulse. On Friday, the most powerful AI available to the public shipped, and to use the most capable version you first needed approval from the US government: around twenty companies, cleared case by case by the White House, after the model scored 96.7% on a cyberattack test and crossed the government's threshold for a high-risk system. The company complied, then asked that this kind of review not become the long-term default. This episode sets that next to its mirror image. The same week, Prime Intellect, a team whose whole identity is training AI without a central data center, trained its strongest model in a single room on a cluster of 512 chips, stopped by a physical limit called the communication wall: at the frontier, the machines must share hundreds of gigabytes of numbers after every step, and over ordinary internet that sharing takes hours while the processors sit idle. We build both from the ground up, in plain language: what frontier AI means, why a named approval list is a different shape from an export ban, why training the frontier still needs one room, and the etymology hiding in the word permission. No prior knowledge assumed. The research, writing, and editorial decisions are human. The voices are AI. Decentralized AI, layer by layer.
• 
  When a Network Sells Itself 25.06.2026 34min

  The Thursday Layer. On a decentralized AI network, the safest yield is paid by a machine that, every twelve seconds, sells off slivers of the very tokens the network is built on. No one decided the network was failing; it is just how the return gets paid, and the belt sells the thriving subnets and the dying ones with the same indifference. This episode takes apart a proposal, Root Reborn, that would switch that belt off and reinvest the yield instead, flipping the largest recurring flow in the system from selling to buying. The catch: whoever chooses where the money is reinvested gains real power over most of the network's capital, and the oldest conflict in finance comes with it. We build it from the ground up: subnets and their tokens, staking and the root, why a forced sale lowers a price, the pattern called reflexivity (a system forced to sell what makes it valuable), and the principal-agent problem underneath. No prior knowledge assumed. The research, writing, and editorial decisions are human. The voices are AI. Decentralized AI, layer by layer.