Tenzro Testnet is live. Get testnet TNZO
← Back to Whitepapers

Tenzro Protocol: Infrastructure for the AI Age

March 2026

Abstract

Tenzro Protocol is the complete decentralized ecosystem designed from first principles for the AI age—an era where autonomous agents and intelligent systems participate as first-class citizens alongside humans. Unlike traditional blockchains built for human-initiated financial transactions, Tenzro provides comprehensive infrastructure for a world where agents act autonomously on behalf of humans or independently with delegated authority.

The Tenzro Protocol encompasses four foundational components:

Every design principle is optimized for an era where autonomous agents and intelligent systems are first-class participants. Agents possess self-sovereign identities, auto-provisioned wallets with MPC-based key management, fine-grained delegation scopes, and native payment protocol support (MPP, x402, Tempo). The protocol's two-tier fee model aligns incentives: validators earn gas fees for securing the Ledger, while model and TEE providers earn service fees on the Network, with commissions flowing to treasury, stakers, and fee burning.

The network is fully decentralized—anyone can install and run a node, stake TNZO to become a validator, or register as a service provider. With live testnet endpoints, comprehensive identity and payment implementations, and a clear path to mainnet, Tenzro Protocol represents a fundamental rethinking of blockchain infrastructure for the agentic economy.

1. Introduction: The Problem

Existing blockchain infrastructures were designed primarily for financial transactions initiated by humans. They excel at moving value between addresses and executing smart contracts in isolated sandboxes. However, three critical gaps emerge when these systems are applied to the AI age:

1.1 No Verifiable Computation

AI inference is fundamentally different from deterministic smart contract execution. Model outputs are non-deterministic, computationally expensive, and require specialized hardware (GPUs). Traditional blockchains cannot verify that an inference result was produced honestly by the claimed model without re-executing the entire computation—an economically infeasible approach. Users must trust centralized providers without cryptographic proof of correctness.

1.2 No Hardware-Rooted Trust

Blockchain security relies on economic incentives (staking, slashing) and cryptographic verification (signatures, Merkle proofs). However, these mechanisms cannot attest to what software is actually running inside a validator node or service provider. A malicious operator could run modified code that steals private keys, manipulates inference results, or front-runs transactions—all while producing valid cryptographic signatures.

Trusted Execution Environments (TEEs) provide hardware-based attestation: cryptographic proof signed by CPU hardware that specific code is running in an isolated, tamper-resistant environment. This extends the trust boundary from purely cryptographic verification to include hardware-rooted guarantees.

1.3 No Agent-Native Primitives

Current blockchains treat all participants as human-controlled accounts. There is no standardized way to represent machine identity, delegate authority with fine-grained permissions, or enable agents to discover and interact with each other. Agents resort to off-chain coordination or brittle smart contract patterns that don't capture the nuances of human-agent and agent-agent relationships.

As AI agents become more autonomous—managing portfolios, negotiating contracts, coordinating with other agents—the infrastructure must provide first-class support for machine identity, verifiable credentials, delegation scopes, and inter-agent communication protocols.

2. The Tenzro Solution

Tenzro Protocol addresses these gaps through a vertically integrated stack combining hardware trust, cryptographic verification, and economic coordination.

2.1 Access to Intelligence: Decentralized AI Network

The Tenzro Network provides a decentralized marketplace for AI inference where model providers register their offerings and users discover models through a unified interface. Inference requests are routed to providers who execute models and return results. To address the verifiable computation challenge, providers can optionally generate zero-knowledge proofs of correct execution or TEE attestations proving the inference ran inside a trusted enclave with the claimed model weights.

Billing operates on a per-token basis using micropayment channels: users open channels with providers by depositing TNZO, providers deduct fractional amounts for each token generated, and either party can close the channel to settle the final balance on-chain. This approach minimizes transaction costs while enabling granular, pay-as-you-go pricing.

The network collects a 0.5% commission on all AI provider payments, which flows to the treasury for ecosystem development, with a portion burned and a portion distributed to TNZO stakers.

2.2 Access to Security: TEE Enclaves as a Service

Tenzro provides a decentralized marketplace for Trusted Execution Environment services. TEE providers register their hardware capabilities (Intel TDX, AMD SEV-SNP, AWS Nitro Enclaves, NVIDIA H100/H200 Confidential Computing) and offer services including:

TEE providers earn TNZO fees for these services. Like the AI marketplace, the network collects a 0.5% commission on TEE provider payments.

2.3 Tenzro Ledger: The L1 Settlement Layer

Tenzro Ledger is a custom Layer 1 blockchain built in Rust with several architectural innovations:

All Ledger transaction fees (gas) are paid in TNZO and distributed to validators using the EIP-1559 model: base fees are burned, priority tips go to block proposers.

3. Design Principles

Every architectural decision in Tenzro Protocol is informed by the reality that autonomous agents and intelligent systems are first-class participants. The following principles guide development:

3.1 Hardware Trust at Foundation

Rather than treating TEEs as an optional optimization, Tenzro embeds hardware trust throughout the stack. Validators gain weight in consensus by running attested enclaves. Wallets use TEE-based MPC for keyless custody. Inference providers attest model execution in GPU TEEs. This provides a complementary trust layer to cryptographic verification, enabling agents to verify that computations occurred in protected environments.

3.2 Cryptographic Verifiability

All operations produce cryptographic proofs: transactions are signed with Ed25519 or Secp256k1, blocks include Merkle roots of state, settlements include ZK proofs of correct payment calculations, TEE attestations are signed by hardware root keys. Agents can verify the integrity of any operation without trusting centralized entities, enabling autonomous decision-making based on verifiable facts.

3.3 General-Purpose L1

Tenzro is not an application-specific chain. The multi-VM architecture supports arbitrary smart contracts (EVM), Solana programs (SVM), and enterprise workflows (DAML/Canton). Developers can build DeFi protocols, NFT marketplaces, DAOs, supply chain trackers—anything possible on Ethereum or Solana—while gaining access to TEE services and AI marketplace primitives as first-class features. Agents can leverage these programmable environments to create custom logic for their autonomous operations.

3.4 Economic Alignment

All participants are incentivized through TNZO: validators earn gas fees, model providers earn inference fees, TEE providers earn service fees, users pay for consumption. The network collects commissions to fund ongoing development and infrastructure. Stakers receive a portion of network revenue. This creates a sustainable circular economy where value flows to those who secure and enhance the network—whether human operators or autonomous agent-run infrastructure.

3.5 Interoperability

Tenzro connects to the broader blockchain ecosystem through multiple bridge adapters: LayerZero (V2 omnichain messaging), Chainlink CCIP (cross-chain interoperability protocol), deBridge (intent-based cross-chain swaps), and Canton (enterprise DAML ledgers). Users and agents can move assets between Ethereum, Solana, and Tenzro, or synchronize state with private Canton deployments, enabling cross-chain agent operations and asset management.

4. Architecture Overview

4.1 Protocol vs Network vs Ledger

Understanding the distinction between these three concepts is critical:

Tenzro Protocol refers to the entire decentralized ecosystem—encompassing the AI marketplace, TEE service registry, provider discovery, payment protocols, agent communication standards, identity framework (TDIP), governance mechanisms, and the TNZO token economics. It is the complete specification for how humans and agents interact with intelligence and security in a decentralized manner.

Tenzro Network refers specifically to the marketplace layer—the AI inference providers, TEE service providers, model registry, routing infrastructure, and off-chain coordination that enable access to intelligence and security. This is the service layer where agents discover and consume resources.

Tenzro Ledger refers specifically to the Layer 1 blockchain that provides settlement, identity, verification, and state consensus for the entire protocol. It is the foundational trust layer that anchors all transactions, identities, and proofs on-chain.

4.2 System Architecture

                    ┌─────────────────────────────────────┐
                    │    User Interfaces                  │
                    │  Desktop (Tauri+React) / CLI / SDKs │
                    └──────────────┬──────────────────────┘
                                   │ JSON-RPC + HTTP
                    ┌──────────────▼──────────────────────┐
                    │         tenzro-node                  │
                    │    RPC Server + Web Verify API       │
                    │      (Tenzro Ledger L1)              │
                    └──────────────┬──────────────────────┘
                                   │
        ┌──────────┬───────────────┼───────────────┬──────────┐
        │          │               │               │          │
   ┌────▼───┐ ┌───▼────┐ ┌───────▼────────┐ ┌───▼───┐ ┌───▼────┐
   │Network │ │Consensus│ │  Multi-VM      │ │Storage│ │ Model  │
   │(libp2p)│ │HotStuff2│ │ EVM+SVM+DAML  │ │RocksDB│ │Registry│
   └────────┘ └────────┘ └────────────────┘ └───────┘ └────────┘
        │          │               │               │          │
   ┌────▼──────────▼───────────────▼───────────────▼──────────▼───┐
   │                 Supporting Infrastructure                     │
   │  Crypto · TEE · ZK · Wallet · Token (TNZO) · Settlement      │
   │  Identity · Payments · Agent · Types · Bridge                │
   └──────────────────────────────────────────────────────────────┘

4.3 Modular Protocol Architecture

The Tenzro implementation is organized as a modular architecture with specialized subsystems:

4.4 Node Roles

Nodes can serve multiple roles simultaneously. Each role has different hardware, staking, and operational requirements:

RoleMin StakeDescription
Validator1,000 TNZOParticipates in consensus, proposes/validates blocks, earns gas fees
Model ProviderNoneServes AI inference requests, earns per-token fees
TEE ProviderNoneOffers TEE services (key custody, confidential compute), earns service fees
Light ClientNoneVerifies block headers, doesn't store full state

4.5 Fee Structure

Tenzro implements a two-tier fee model to align incentives across all participants:

Tier 1: Ledger Gas Fees
All transactions on Tenzro Ledger pay gas fees in TNZO using the EIP-1559 model:

  • Base fee (dynamically adjusted ±12.5% per block) → burned
  • Priority tip (user-specified) → block proposer
  • Target gas per block: 15,000,000 gas
  • Max gas per block: 30,000,000 gas

Tier 2: Network Service Fees
AI inference and TEE service payments flow from users to providers. The network collects a 0.5% commission on these payments, distributed as:

  • 40% → Network treasury (development, infrastructure)
  • 30% → Burned (deflationary pressure)
  • 30% → TNZO stakers (staking rewards)

5. API Surface

Tenzro nodes expose four distinct API interfaces, each serving different use cases:

5.1 JSON-RPC API (Port 8545)

Ethereum-compatible JSON-RPC for wallet integration, block explorers, and developer tools. Supports standard methods: eth_blockNumber, eth_getBalance, eth_sendTransaction, eth_call, eth_estimateGas, plus Tenzro-specific extensions for identity registration, inference requests, and payment protocol operations.

5.2 Web Verification API (Port 8080)

RESTful HTTP API for verifying cryptographic proofs and attestations:

5.3 MCP Server (Port 3001)

Model Context Protocol server implementing Anthropic's MCP specification for AI agent integration. Uses Streamable HTTP transport at /mcp endpoint. Provides 10 tools:

ToolDescription
get_balanceQuery TNZO balance by address
send_transactionCreate and submit transfer transactions
get_blockRetrieve block by height
get_node_statusNode health, block height, peer count
create_walletGenerate new Ed25519 keypair
request_faucetRequest testnet tokens (rate-limited)
register_identityRegister human or machine DID via TDIP
resolve_didResolve DID to identity information
verify_zk_proofSubmit ZK proof for verification
list_modelsList available AI models

5.4 A2A Protocol Server (Port 3002)

Agent-to-Agent protocol server following Google's A2A specification. Implements JSON-RPC 2.0 with Server-Sent Events (SSE) streaming for task updates:

Supported RPC methods: message/send, tasks/send, tasks/get, tasks/list, tasks/cancel

6. Technical Components Overview

Each major subsystem is documented in detail in dedicated whitepapers. Below is a summary with links to full technical specifications:

6.1 Consensus and Ledger

HotStuff-2 BFT consensus with TEE-weighted leader selection, achieving O(n) linear communication complexity and deterministic finality. Multi-VM execution environment supporting EVM, SVM, and DAML contracts with parallel execution via Block-STM.

→ Read full Tenzro Ledger whitepaper

6.2 TEE Security

Multi-vendor TEE abstraction supporting Intel TDX, AMD SEV-SNP, AWS Nitro Enclaves, and NVIDIA Confidential Computing (Hopper H100/H200, Blackwell B100/B200, Ada Lovelace). Attestation verification with certificate chain validation, remote attestation flows, and defense-in-depth against side-channel attacks.

→ Read full TEE Security whitepaper

6.3 Zero-Knowledge Proofs

Groth16 SNARKs on BN254 curve with GPU-accelerated proving. Pre-built circuits for inference verification, settlement proofs, and identity proofs. Hybrid ZK-in-TEE execution combining cryptographic proofs with hardware attestation. Multi-level proof compression and Merkle tree-based batch aggregation.

→ Read full Zero-Knowledge Proofs whitepaper

6.4 Identity Protocol (TDIP)

Tenzro Decentralized Identity Protocol provides unified identity for humans and machines. W3C DID-compatible with formats did:tenzro:human:{uuid} and did:tenzro:machine:{controller}:{uuid}. Verifiable credentials with inheritance, delegation scopes with fine-grained permissions, auto-provisioned MPC wallets, and cascading revocation.

→ Read full TDIP Identity whitepaper

6.5 Payment Protocols

Multi-protocol payment support for machine-to-machine commerce. MPP (Machine Payments Protocol, co-authored by Stripe and Tempo) with HTTP 402 challenge/credential/receipt flows. x402 (Coinbase's HTTP 402 protocol). Tempo network integration for stablecoin settlement. Identity-bound payments with delegation scope enforcement.

→ Read full Payment Protocols whitepaper

6.6 TNZO Governance

TNZO is the native utility and governance token with 18-decimal precision. Used for gas fees, inference payments, TEE service fees, staking, and governance voting. Network treasury with multi-asset support and multisig withdrawals. Liquid staking (stTNZO) with rebasing exchange rate, multi-validator delegation, and 7-day unbonding. Governance engine for on-chain proposals and stake-weighted voting.

→ Read full TNZO Tokenomics whitepaper

6.7 Decentralized AI Network

Decentralized marketplace for AI inference with permissionless model serving. Model registry with category/modality filtering, provider health monitoring, inference routing strategies (price, latency, reputation, weighted), dynamic pricing engine, micropayment channels for per-token billing, and verifiable inference results via ZK proofs or TEE attestations.

→ Read full Decentralized AI Network whitepaper

7. Security Model

7.1 Threat Model

Tenzro operates under the following security assumptions:

7.2 Defense Layers

LayerMechanismProtects Against
ConsensusHotStuff-2 BFT quorum (2f+1)Byzantine validators, double-spend, forks
CryptographyEd25519 + Secp256k1 signatures, SHA-256 + Keccak-256 hashingTransaction forgery, state tampering, message injection
TEEHardware attestation (Intel DCAP, AMD ASP, AWS ACM, NVIDIA NRAS)Software tampering, key extraction, data exfiltration
ZK ProofsGroth16 SNARKs on BN254 curveInvalid computation claims, payment fraud, credential forgery
EconomicsStake slashing (10% for equivocation, automatically enforced via SlashingCallback trait)Validator misbehavior, liveness attacks, censorship
NetworkMessage deduplication, rate limiting, peer reputationAmplification attacks, spam, Sybil attacks
StorageFsync for finalized blocks, Merkle proofsData corruption, state inconsistency
WalletMPC 2-of-3 threshold, Argon2id KDF, AES-256-GCM keystoreKey theft, brute-force attacks, unauthorized signing

7.3 Attack Vectors and Mitigations

51% Attack — An attacker controlling 2f+1 validators could halt consensus or censor transactions. Mitigation: High cost of acquiring sufficient stake (minimum 1000 TNZO per validator × (2f+1) validators), slashing of misbehaving validators, social consensus for hard fork if attack occurs.

TEE Side-Channel Attacks — Physical access to TEE hardware enables timing, power analysis, or cache attacks. Mitigation: Constant-time cryptographic implementations, memory encryption (Intel TME, AMD SME), randomized execution patterns, geographically distributed validators make physical access difficult.

Inference Result Manipulation — Model provider returns incorrect results to users. Mitigation: Optional TEE attestation proving model code integrity, ZK proofs for deterministic operations, reputation system slashing dishonest providers, multi-provider result comparison.

Bridge Exploits — Cross-chain bridges are high-value targets. Mitigation: Multi-signature bridge contracts, time-delayed withdrawals, monitoring systems, insurance via bridge protocol treasury, diversification across multiple bridge providers (LayerZero, CCIP, deBridge).

8. Development Roadmap

Tenzro development follows a phased approach, prioritizing core infrastructure before application-layer features:

Phase 1: Core Infrastructure — Complete

Phase 2: Execution Layer — Complete

Phase 3: Network and Consensus — Complete

Phase 4: Identity and Payments — Complete

Phase 5: Agent and Protocol Integration — Complete

Phase 6: Testnet Deployment — Complete

Phase 7: Economics and Settlement — Complete

Phase 8: Bridge and Interoperability — In Progress

Phase 9: AI Infrastructure — In Progress

Phase 10: Client Applications — In Progress

Phase 11: Production Hardening — Planned

9. Testnet Deployment

The Tenzro testnet is live on distributed cloud and hybrid infrastructure with multiple validator nodes and dedicated RPC endpoints, secured with automatic TLS certificates.

9.1 Testnet Endpoints

ServiceURLDescription
JSON-RPChttps://rpc.tenzro.networkEVM-compatible JSON-RPC
Web APIhttps://api.tenzro.networkREST verification and status API
Faucethttps://api.tenzro.network/api/faucetTestnet TNZO token faucet
MCPhttps://mcp.tenzro.network/mcpModel Context Protocol server
A2Ahttps://a2a.tenzro.networkAgent-to-Agent protocol

9.2 Testnet Configuration

Chain ID:1337
Validators:3 nodes (tenzro-validator-0, tenzro-validator-1, tenzro-validator-2)
RPC Nodes:1 node (tenzro-rpc)
Genesis Supply:1,000,000,000 TNZO (1 billion)
Faucet Allocation:10,000,000 TNZO (10 million)
Faucet Limit:100 TNZO per request
Faucet Cooldown:24 hours per address
Min Validator Stake:1,000 TNZO

9.3 Getting Started

To interact with the testnet:

  1. Request testnet TNZO tokens from the faucet by submitting your address to POST https://api.tenzro.network/api/faucet
  2. Configure your wallet or development tool to use the JSON-RPC endpoint at https://rpc.tenzro.network
  3. Use the Tenzro CLI (tenzro-cli) or desktop app (tenzro-desktop) to manage identities, wallets, and transactions
  4. Access the MCP server for AI agent integration at https://mcp.tenzro.network/mcp
  5. Discover agent capabilities via the A2A Agent Card at https://a2a.tenzro.network/.well-known/agent.json

10. Conclusion

Tenzro Protocol represents a fundamental rethinking of blockchain infrastructure for the AI age. By combining hardware-rooted trust (TEEs), cryptographic verifiability (ZK proofs), economic coordination (TNZO staking and fees), and agent-first design (TDIP identity, A2A protocol), Tenzro enables a new class of applications where autonomous agents can securely access intelligence, custody assets, execute transactions, and coordinate with each other and with humans.

The protocol's two-tier fee structure aligns incentives across all participants: validators earn gas fees for securing the ledger, model providers earn inference fees for serving intelligence, TEE providers earn service fees for providing security, and the network treasury collects commissions to fund ongoing development. TNZO stakers receive a portion of network revenue, creating a sustainable economic flywheel.

With a live testnet, full multi-VM execution support, and comprehensive identity and payment protocol implementations, Tenzro is progressing toward mainnet launch in late 2026. The roadmap prioritizes production hardening, cross-chain bridge integration, and decentralized AI marketplace activation before public launch.

We invite developers, validators, model providers, and AI agents to participate in the testnet, provide feedback, and help build the infrastructure for an AI-native economy.

References

Disclaimer: This whitepaper describes the technical architecture and vision for Tenzro Protocol as of March 2026. The project is in active development. Implementation details, timelines, and features are subject to change. TNZO is a utility and governance token used for transaction fees, service payments, staking, and governance—it is not a security token or investment contract. This document is for informational purposes only and does not constitute financial, legal, or investment advice.