Agents in the Shell: TEE-Attested AI as On-Chain Oracles
2026-11-03 –, Lightning Stage

Oracles today rely on trusted operators or heavy tokenomics. This only makes sense for high-value feeds, leaving the long tail of real-world questions uncovered. We run an LLM agent inside a TEE and let it answer arbitrary prompts on-chain, with a hardware-rooted signature chain verified by the contract.


Prediction markets and on-chain apps increasingly need answers to long-tail questions: did this event happen, what did this page say, who won this niche election. Existing oracle designs cannot serve this demand, since trusted operators do not scale to arbitrary questions and tokenomics-based schemes only pay off for high-value feeds.

Instead, we run an LLM agent with web search inside an Intel TDX enclave. Anyone can submit any prompt on-chain, and every answer carries a signature chain rooted in hardware attestation that the contract verifies before storing the response. The result is tamper-evident and replayable: you know exactly which code and model produced the answer from exactly which prompt. We walk through the oracle design, plus the mechanism design that ensures agents fulfill their commitments on time.

Lin Oshitani is a protocol researcher at Nethermind. He previously worked as a core developer of the Tezos blockchain and a software engineer at Indeed. He is currently based in Tokyo.