Autonomous and semi-autonomous AI systems — planning, tool use, multi-agent coordination.
On-chain AI agents reset state on every call. Four persistent-memory architectures span a 20× monthly cost gap — SSTORE at $78/month versus IPFS+CID at $3.92. Real June 2026 gas numbers, four trust models, one crossover you won't see coming.
DeFi interest rate formulas are open-source reward functions. An RL agent reading Aave's two-slope model can compute the optimal adversarial strategy analytically — no learned reward model required.
On-chain AI agents face a circular oracle problem: you need inference to decide if inference is worth calling. Here's what the token cost distribution actually looks like — and how to build around it.
Probabilistic classifiers miss 30–40 % of policy violations. Lean 4 theorem provers and SMT solvers make certain guardrail tiers mathematically certain — here's how the four-layer policy stack works.
On OP Stack chains, 'confirmed' is a four-layer promise stretching from 2 seconds to 7 days. AI agents that collapse these into one boolean expose themselves to sequencer reorgs, bridge lockups, and state dispute windows. Here's the full settlement stack, and an action taxonomy for each rung.
Llama-3.1-8B starts at 15.9% on MATH. Put it in an auction economy and it reaches 57.0% — beating a stronger monolithic baseline. The mechanism is Hayek: decentralized price signals, wealth accumulation, and economic selection pressure do what central orchestration can't.
LLMs collude in on-chain auctions even when written rules forbid it — only enforceable, automatic penalties slash severe collusion from 50% to 5.6%. Here's how governance graphs make that concrete.
A flash loan gives an AI agent $1M with no collateral — and demands it back plus 0.05% before the block ends. The atomic callback constraint is both what makes flash loans safe and what forces an agent to solve its entire strategy before touching the chain.
A scan of ~2,000 MCP servers found zero with authentication. When an AI agent calls a tool, the tool has no idea who authorized it, with what scope, or whether a human was ever involved. IBCT tokens and the HDP IETF draft add an unforgeable answer — in 0.049 ms Rust verification.
Give autonomous LLM agents a marketplace and they race each other to bankruptcy and get conned by Sybils. A 2026 study finds capability doesn't help — a 9B model beat frontier models 45× its size on economic alignment. On-chain, both failures get cheaper and worse. The mechanics, numbers, and fixes.
The textbook market-making model quotes symmetrically around mid. On a perpetual, holding inventory pays or charges funding every hour — a deterministic drift Avellaneda-Stoikov never sees. A 2026 HJB model that prices it cut inventory risk 36-38% on Hyperliquid ETH and BTC.
An on-chain agent reports its work in prose — and some of those sentences are fabricated tool calls. zkML proves the wrong thing at minutes per query. The blockchain already wrote an unforgeable receipt for the actions that matter, and a 12ms signed receipt covers the rest.