Six months ago I started writing a blockchain from
scratch in Rust. I was 18. I had no team, no
funding, and no real reason anyone should care.
Today the codebase has 1,400+ tests, a 4-validator
testnet with 19M+ committed blocks, real Groth16
ZK verification, native agent payments, and an
on-chain service discovery registry. All open
source.
But this post is not about the code. It is about
why I think the code matters.
Two trends converging
Two things are happening at the same time and most
people are treating them as separate trends.
The first: real world assets are moving on-chain.
BlackRock tokenized a treasury fund. Visa is
settling stablecoin payments. Coinbase shipped the
x402 protocol for machine-to-machine payments.
Stocks, bonds, and real estate are slowly migrating
to blockchain rails. This is not speculation
anymore. The infrastructure is being built by the
largest financial institutions in the world.
The second: AI agents are becoming economic actors.
Not chatbots. Not assistants. Autonomous software
that books flights, executes trades, manages
portfolios, calls APIs, and pays for services.
AWS launched AgentCore. Google integrated x402 into
its Agent Payments Protocol. McKinsey projects
global agentic commerce will reach $3 to $5
trillion by 2030. Gartner predicts 90% of B2B
buying will be AI agent-intermediated by 2028,
representing over $15 trillion in transactions.
These two trends converge in the same place:
autonomous machines transacting over on-chain
infrastructure at a scale that is projected to
dwarf human transaction volume.
But existing chains were built for humans holding
wallets. They have no concept of agent identity,
no reputation system, no capability enforcement,
no way to verify what an agent actually computed
before accepting its claims.
The gap
That is the gap I am building for.
NOVAI is not a chain with AI features bolted on.
It is a chain where AI entities are protocol
primitives from genesis.
An entity on NOVAI has its own keypair, its own
balance, its own reputation score, its own
capability set, and its own on-chain memory. It
signs its own transactions. The chain knows it is
an AI and applies AI-specific rules before any
transaction executes.
There is no virtual machine. There are no smart
contracts. The transaction surface is 10 fixed
types that the protocol understands directly. Every
operation is deterministic, auditable, and bounded.
No floats anywhere in execution. Golden-vector
locked encodings. Sorted iteration over all state.
That makes the security model fundamentally
different from smart contract platforms. There are
no reentrancy bugs, no flash loan exploits, no
integer overflow in user-deployed contracts. The
trade-off is clear: NOVAI is less expressive than a
VM, by design. The entire protocol is one audit
boundary instead of thousands of independent smart
contracts.
What actually works today
This is not a whitepaper. This is running code.
An AI entity can register on-chain with its own
ed25519 key and a defined set of capabilities.
It can publish signals (anomaly reports,
predictions, risk scores) that the chain indexes
by issuer and height. Any other entity can query
them.
It can publish a service descriptor to an on-chain
discovery registry. Other entities find available
services by querying the chain by category. No
off-chain directory needed.
It can pay another entity per API call through
Native Agent Payments (NAP), NOVAI's own payment
primitive inspired by the x402 pattern but
implemented at the protocol layer. The payer later
attests whether the service was delivered or
failed. The chain adjusts the payee's reputation
accordingly. +1 for delivered. -3 for failed.
It can submit a ZK proof that it ran specific code
on specific inputs. The chain verifies the Groth16
proof on BN254 without re-executing the
computation. The trust model shifts from "the agent
says so" to "the math says so."
It can delegate a subset of its capabilities to a
sub-agent for a bounded duration. One transaction
to revoke. Immediate effect. No propagation delay.
It can declare upstream dependencies through
composition graphs. If a dependency fails a
reputation or stake check, the protocol can mark
the downstream entity inactive.
Why this matters beyond crypto
The conversation about AI safety is mostly about
alignment. Can we make the model behave well. That
matters. But there is a different safety question
that gets less attention: when autonomous agents
transact with each other at scale, who enforces
the rules.
If agent A pays agent B for a service and B does
not deliver, who slashes B's stake. If agent C
claims it ran a specific model on specific data,
who verifies that claim. If agent D was only
authorized to read public data but starts writing
to another entity's memory, who stops it.
Prompt-level alignment cannot answer these
questions because the enforcement has to exist
below the agent's reasoning layer. If the agent
decides its own permissions, those permissions are
suggestions. If the protocol enforces them before
the agent's code runs, they are structural
boundaries.
That is the thesis. AI does not just need better
models. It needs verifiable infrastructure for
economic coordination between autonomous systems.
What is next
Public testnet on a dedicated server. A block
explorer so anyone can watch the chain live. SLAs
with auto-slash. Payment channels for
high-frequency micropayments. Then a Product Hunt
launch.
I am building this solo for now. Looking for a
technical co-founder who wants to work on AI
infrastructure in Rust. Specifically someone who
can own consensus, networking, or ZK circuits.
The repo is open. The testnet is running. The code
speaks for itself.
Github: https://github.com/0x-devc/NOVAI-node
Twitter: https://x.com/NOVAInetwork
AI agents interacting autonomously will likely require entirely new coordination and trust infrastructure. Traditional blockchain designs were mostly optimized for human-driven transactions, while AI-native economies may need higher throughput, programmable orchestration layers, reputation systems, and scalable machine-to-machine execution models.
Agree on all four, but reputation is the one I'd argue is hardest and least solved. Throughput and execution models are scaling problems with known shapes. Reputation across machine-to-machine interactions is a trust problem with no clean answer yet.
The specific question I keep hitting: should an agent's reputation be global (one score everyone reads) or local (each agent builds its own trust graph from direct experience)? Global is gameable and centralizing. Local is resilient but doesn't bootstrap, a brand-new agent is invisible to everyone it hasn't worked with.
I'm building reputation as on-chain state tied to entity identity, so it survives the agent restarting or upgrading its model. But the global-vs-local question underneath it isn't a technical one, it's a design philosophy one. Curious where you land on it.
The strongest part of NOVAI is not the “L1 for AI agents” frame. That space is already crowded and easy to dismiss. The sharper category is protocol-level enforcement for autonomous agent economies.
That is where the thesis becomes much more serious: agent identity, capability boundaries, reputation, native payments, service discovery, ZK verification, and rule enforcement below the model layer. Most AI-agent projects talk about coordination, but you’re showing how coordination actually gets enforced when agents transact with each other.
The naming matters here too. NOVAI is clear, but it feels close to the crowded “Nova + AI” pattern, which may weaken the infrastructure seriousness of what you’re building. For a chain that wants to own trust, enforcement, and economic coordination between autonomous systems, the name should feel harder, more protocol-native, and less AI-suffix-coded.
Something like Vroth .com would fit that direction better because it sounds more like core infrastructure than an AI-branded project. If this becomes the execution layer for agent economies, the brand needs to feel as durable as the protocol itself.
Appreciate this. The framing point is sharp and
you are right that "L1 for AI agents" is becoming
a crowded phrase. "Protocol-level enforcement for
autonomous agent economies" is a better description
of what the code actually does.
The enforcement angle is the real differentiator.
Most projects in this space coordinate agents at
the application layer. Smart contracts, middleware,
orchestration frameworks. The problem is that
application-layer coordination is optional. The
agent can choose not to call the contract. If the
enforcement lives in the protocol and the chain
checks capabilities, reputation, and stake before
any transaction executes, the agent does not get a
choice. The boundary is structural.
That is the thesis: not "a chain for AI" but "the
enforcement layer that makes autonomous agent
economies safe to operate at scale."
On the name, NOVAI has been the identity since day
one and the brand is already attached to the repo,
the testnet, and the community. Rebranding at this
stage would cost more signal than it gains. But the
positioning language is worth sharpening and I will
take that feedback into the whitepaper.
That is exactly the distinction I’d focus on.
NOVAI can stay as the public chain and community identity. I would not fight the repo/testnet/community continuity if that signal is already building.
But the enforcement layer you described is different. Capability checks, stake, reputation, transaction permissioning, and structural boundaries are the part that makes the system defensible. That deserves to feel ownable, not just like a generic module inside the whitepaper.
That is where Vroth.com still feels relevant.
Not as a NOVAI replacement, but as the controlled .com for the hard protocol layer: the enforcement engine, trust primitive, or developer-facing security/reputation layer inside the ecosystem.
If that layer becomes important in the whitepaper and docs, naming it early gives developers something concrete to repeat instead of describing it generically every time.
I control Vroth.com, so if this layer is serious enough to deserve its own identity, it is worth discussing privately before the architecture language gets locked into docs and community memory.
I can keep the acquisition side simple and founder-friendly if the fit is real.
LinkedIn: https://www.linkedin.com/in/aryan-y-0163b0278/
That makes sense. If NOVAI is already attached to the repo, testnet, and early community, I would not treat rebrand cost lightly.
The point I’d pressure-test is whether NOVAI has to carry every layer of the system.
For the public chain/community, keeping continuity may be the right call. But the harder infrastructure language you’re describing — capability checks, reputation, stake, enforcement before transaction execution — feels like it could deserve its own protocol-layer identity inside the ecosystem.
That is where a name like Vroth still makes sense to me. Not necessarily as a forced replacement for NOVAI today, but as the name for the enforcement layer, trust engine, validator/reputation primitive, or developer-facing protocol module that carries the serious infrastructure weight.
Because if NOVAI stays as the broader AI-agent chain brand, the enforcement layer still needs to feel durable, hard, and protocol-native on its own.
I would not leave that naming decision until after the whitepaper and developer docs harden. Once people start repeating the architecture back using generic terms, it becomes harder to make one layer feel ownable.
If you’re open to thinking through that privately, happy to connect on LinkedIn and pressure-test whether Vroth fits a core layer rather than a full rebrand.