zkML in 2026: The State of Verifiable Inference
Zero-knowledge proofs promised to make machine learning trustless. A field survey of where zkML actually stands — proving systems, quantization tradeoffs, and what's deployable today.
Journal
136 articles on the craft of AI × blockchain engineering. or filter by topic:
Zero-knowledge proofs promised to make machine learning trustless. A field survey of where zkML actually stands — proving systems, quantization tradeoffs, and what's deployable today.
Story raised $140M to make IP programmable for the AI era. We read its chain: 6.46M registered IP assets, 230,300 licenses ever minted, one week of royalties totaling $10 — plus the LAP/LRP royalty math and the precompile at 0x0101 that computes the graph.
A scan of ~2,000 MCP servers found zero with authentication. When an AI agent calls a tool, the tool has no idea who authorized it, with what scope, or whether a human was ever involved. IBCT tokens and the HDP IETF draft add an unforgeable answer — in 0.049 ms Rust verification.
The Elliptic benchmark made GNNs the default for on-chain AML. A 2026 leakage-free re-evaluation flips the script: random forests win by 13 F1 points, randomly rewired edges beat the real graph, and every model falls off a cliff at time step 43.
DataDAOs promise to pay you for your data — but 'pay you fairly' hides a cooperative-game problem that's O(2ⁿ). Inside Data Shapley, the KNN trick that makes it tractable, why rankings flip under SGD noise, and what Vana's Proof of Contribution actually computes instead.
The gradients never touch the chain. What Solana actually stores when Psyche trains a 36B model across 24 nodes, how TOPLOC audits untrusted GPUs in 258 bytes, and why the flagship 'decentralized' model still shipped from a 512-GPU cluster.
An AI agent that acts on your bank balance has to prove it saw that balance — without a trusted API. zkTLS turns any HTTPS session into a portable proof. We dissect MPC-TLS vs proxy vs TEE, the real TLSNotary benchmarks, and read Reclaim's on-chain verifier on Base down to its single attestor.
Uniswap v4 hooks make every liquidity pool programmable. Here's how the 14-bit permission bitmap works, what fires during a swap, and where AI agents fit into dynamic fee architecture.
An AI inference that runs inside a TEE proves it with an attestation quote. A smart contract can check that quote — for ~4-5M gas naively, down to a flat ~290k once a zkVM compresses it. But every gas unit buys a chip vendor's signature, and in 2025 a $1,000 interposer forged one.
Uniswap v3's capital efficiency multiplier peaks at 20× for ±10% ranges, but first-passage math shows the same position rebalances 54 times a year — making active LP management an optimization problem that requires AI-grade execution frequency.
Bond-and-slash verifiable AI assumes someone audits. But checking costs money and pays nothing, so a rational verifier won't — the verifier's dilemma. Proof of Sampling fixes it with a bounty, and the math says honest inference holds at a 0.74% sampling rate where nobody ever arbitrates.
An on-chain agent acts on facts it reads from an RPC it has to trust. ZK coprocessors swap that trusted read for a proof — and the punchline is succinctness: proving a query over a year of blocks verifies for the same flat ~300k gas as one slot. The mechanism, the anchor problem, real-time proving.