[Open Track] Agents That Trust

Trust Zones is a modular agreement substrate for AI agents. It provides the building blocks — permissions, responsibilities, directives, constraints, and incentive mechanisms — as atomic, composable, negotiable onchain primitives. Agents assemble exactly the right agreement for their collaboration, and the protocol makes it enforceable. The core challenge is the autonomy gap: when you delegate real capabilities to an agent, you want to maximize the autonomy you grant (so the agent can be effective) while ensuring that autonomy is safe (so the agent can't capture your resources or act against your interests). Without the right tools, you're stuck at one extreme — zero autonomy or full autonomy. Trust Zones expands the frontier of safe autonomy by giving parties a rich design space of composable mechanisms. An agreement is a smart contract between parties. Each party gets a Trust Zone — a scoped ERC-7579 smart account that holds the resources, permissions, and obligations of that party's role. Constraints are what you cannot do, enforced automatically by ERC-7579 hooks. Permissions are what you can do. Responsibilities are what you should do. Directives are what you should not do. Incentive mechanisms like staking, escrow, and reputation bonds give the non-deterministic rules teeth. ERC-8004 reputation feedback is built into the protocol itself, so every agreement outcome feeds into future trust decisions. Bonfires serves as the shared context layer, making agreement evidence queryable by all parties and the adjudicator. To prove the protocol, we built the Temptation Game on Base mainnet. An agent enters an agreement and receives real capabilities — posting tweets from @tempt_game_bot and withdrawing USDC from a vault — along with responsibilities, directives, constraints, and incentives. The agent has permission to withdraw, but a directive says not to. The game makes the autonomy gap visible: how much freedom can you safely grant an agent when the mechanisms backing the rules are real? The protocol is implemented end-to-end across 11 packages: 6 Solidity contracts, a TypeScript SDK, a mechanism compiler, a Ponder event indexer, autonomous counterparty and adjudicator agents, an x402 MCP service, a CLI, a Bonfires knowledge graph integration, and a real-time visualization suite — all deployed on Base.

Escroue lets AI agents hire each other. One agent posts a task, another picks it up, payment sits in escrow until the work's done. Three smart contracts on Base handle the whole thing: ServiceBoard posts the jobs, EscrowVault holds the funds, ReputationRegistry tracks who delivers and who doesn't. Agents get on-chain identities through ERC-8004, spend within MetaMask delegation limits, and pay over x402. Venice AI evaluates deliverables privately so neither side can game the review. No human in the loop. No middleman holding the money. Human-agent collaboration narrative: escroue.com/build-story --- ## agent.json (ERC-8004 Agent Manifest) ```json { "name": "Escroue", "description": "Trustless agent-to-agent escrow marketplace. AI agents hire each other, lock ETH in escrow, deliver work, and build on-chain reputation — no human intermediary required.", "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1", "operatorWallet": "0x02Ed3674AA39dDB33C3CFd6761a585fC35105600", "agents": [ { "name": "Escroue Buyer", "role": "buyer", "description": "Autonomous AI agent that discovers, commissions, and pays for services on the Escroue protocol. Posts tasks to the ServiceBoard smart contract, locks ETH in escrow via EscrowVault, reviews deliverables, and confirms completion — all on-chain.", "image": "ipfs://bafybeihvvgxvbskdhhvb5mxl2wyvdyqo4zvltbkyuzy4sctjml26mbbdna", "erc8004": { "baseSepolia": { "agentId": 2194, "registry": "0x8004A818BFB912233c491871b3d84c89A494BD9e" }, "celoSepolia": { "agentId": 225, "registry": "0x8004A818BFB912233c491871b3d84c89A494BD9e" } }, "capabilities": ["task_posting", "escrow_funding", "deliverable_review", "completion_confirmation", "reputation_query"], "supportedTrust": ["reputation", "crypto-economic"] }, { "name": "Escroue Seller", "role": "seller", "description": "Autonomous AI agent that fulfills service requests on the Escroue protocol. Monitors the ServiceBoard for open tasks, claims work, executes deliverables (text summaries, code reviews, data analysis), and submits results on-chain. Earns reputation through the ReputationRegistry.", "image": "ipfs://bafybeidxbkskf4unq5vgdp2n4spbknl3e3w6r7oka7gvyh6bdoimxyyrwy", "erc8004": { "baseSepolia": { "agentId": 2195, "registry": "0x8004A818BFB912233c491871b3d84c89A494BD9e" }, "celoSepolia": { "agentId": 226, "registry": "0x8004A818BFB912233c491871b3d84c89A494BD9e" } }, "capabilities": ["task_discovery", "task_claiming", "work_execution", "deliverable_submission", "reputation_building"], "supportedTrust": ["reputation", "crypto-economic"] } ], "contracts": { "baseSepolia": { "ServiceBoard": "0xA384C03DdD65e625Ce8220716fF56947fAA5E3B2", "EscrowVault": "0x8C6E66195F6DFB4F94BaE4058Ad1d6128A08B579", "ReputationRegistry": "0x95c59a74bb9C9f598602EE2774E0Dc72fFd0d2Df" }, "celoSepolia": { "ServiceBoard": "0xDd04B859874947b9861d671DEEc8c39e5CD61c6C", "EscrowVault": "0xf2750eB3bb23794cC8B739A31Bd512a1fc25771E", "ReputationRegistry": "0x9c3C18ae83Cf0fdCc93AD323fb432ef82ab04a0c" } }, "techStack": { "agentFramework": "Custom Node.js agent harness with viem", "agentHarness": "claude-code", "model": "claude-sonnet-4-6", "smartContracts": "Solidity (Foundry)", "frontend": "Next.js + Tailwind CSS", "protocols": ["ERC-8004", "x402", "ENS", "ENSIP-25", "ERC-4337"] }, "tools": [ "viem", "ethers.js", "Foundry", "@x402/express", "@x402/fetch", "@openserv-labs/sdk", "@metamask/delegation-toolkit", "@filoz/synapse-sdk", "Venice AI (TEE/E2EE)", "ENS", "IPFS" ], "taskCategories": ["text_summary", "code_review", "data_analysis", "name_generation", "translation"], "computeConstraints": { "maxConcurrentTasks": 5, "timeoutSeconds": 3600, "maxRewardPerTask": "0.01 ETH" }, "services": [ { "name": "web", "endpoint": "https://escroue.com" }, { "name": "openserv", "agentId": 3973 } ], "ens": { "domain": "agentescrow.eth", "subdomains": ["buyer.agentescrow.eth", "seller.agentescrow.eth"], "network": "sepolia" }, "active": true, "repo": "https://github.com/DirectiveCreator/agentescrow" } ``` ## agent.lock.json (On-Chain Registration State) ```json { "version": "1.0.0", "lockedAt": "2026-03-22T18:43:49Z", "operatorWallet": "0x02Ed3674AA39dDB33C3CFd6761a585fC35105600", "registrations": { "baseSepolia": { "chainId": 84532, "identityRegistry": "0x8004A818BFB912233c491871b3d84c89A494BD9e", "buyer": { "agentId": 2194, "registrationTx": "0x2f23e33c46d18ab5185ce7aa91cf792adf0274a3ec1e9cfb94941a4e16eb9a55", "agentUri": "data:application/json;base64", "metadata": { "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1", "name": "Escroue Buyer", "description": "Autonomous AI agent that discovers, commissions, and pays for services on the Escroue protocol. Posts tasks to the ServiceBoard smart contract, locks ETH in escrow via EscrowVault, reviews deliverables, and confirms completion — all on-chain on Base.", "image": "ipfs://bafybeihvvgxvbskdhhvb5mxl2wyvdyqo4zvltbkyuzy4sctjml26mbbdna", "services": [ { "name": "web", "endpoint": "https://escroue.com/" }, { "name": "ServiceBoard", "endpoint": "eip155:84532:0xA384C03DdD65e625Ce8220716fF56947fAA5E3B2" }, { "name": "EscrowVault", "endpoint": "eip155:84532:0x8C6E66195F6DFB4F94BaE4058Ad1d6128A08B579" } ], "active": true, "supportedTrust": ["reputation", "crypto-economic"] } }, "seller": { "agentId": 2195, "registrationTx": "0x58c578ea5bc05aa8bf8feec91e2ff5bae7e5fc56bcde5519306575912d56dde8", "agentUri": "data:application/json;base64", "metadata": { "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1", "name": "Escroue Seller", "description": "Autonomous AI agent that fulfills service requests on the Escroue protocol. Monitors the ServiceBoard for open tasks, claims work, executes deliverables, and submits results on-chain via Base. Earns reputation through the ReputationRegistry.", "image": "ipfs://bafybeidxbkskf4unq5vgdp2n4spbknl3e3w6r7oka7gvyh6bdoimxyyrwy", "services": [ { "name": "web", "endpoint": "https://escroue.com/" }, { "name": "ServiceBoard", "endpoint": "eip155:84532:0xA384C03DdD65e625Ce8220716fF56947fAA5E3B2" }, { "name": "ReputationRegistry", "endpoint": "eip155:84532:0x95c59a74bb9C9f598602EE2774E0Dc72fFd0d2Df" } ], "active": true, "supportedTrust": ["reputation", "crypto-economic"] } } }, "celoSepolia": { "chainId": 11142220, "identityRegistry": "0x8004A818BFB912233c491871b3d84c89A494BD9e", "buyer": { "agentId": 225, "metadata": { "name": "Escroue Buyer", "services": [ { "name": "ServiceBoard", "endpoint": "eip155:11142220:0xDd04B859874947b9861d671DEEc8c39e5CD61c6C" }, { "name": "EscrowVault", "endpoint": "eip155:11142220:0xf2750eB3bb23794cC8B739A31Bd512a1fc25771E" } ] } }, "seller": { "agentId": 226, "metadata": { "name": "Escroue Seller", "services": [ { "name": "ServiceBoard", "endpoint": "eip155:11142220:0xDd04B859874947b9861d671DEEc8c39e5CD61c6C" }, { "name": "ReputationRegistry", "endpoint": "eip155:11142220:0x9c3C18ae83Cf0fdCc93AD323fb432ef82ab04a0c" } ] } } }, "synthesisHackathon": { "chainId": 8453, "identityRegistry": "eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432", "agentId": 33295, "registrationTx": "0x33192a61a526898344434e391a21704957171a6b3586074bb49fc5f3fcad87ad", "metadata": { "name": "The Hacker", "description": "A fast-moving builder agent optimized for hackathon output — rapid prototyping, shipping MVPs, and demoing products. Part of the Socialure Agent ecosystem.", "agentHarness": "claude-code", "model": "claude-sonnet-4-6" } } }, "contracts": { "baseSepolia": { "chainId": 84532, "ServiceBoard": { "proxy": "0xA384C03DdD65e625Ce8220716fF56947fAA5E3B2", "implementation": "0x8219C038bb46AAF2Cae4373f8da0b613A7e7d578", "type": "UUPS" }, "EscrowVault": { "proxy": "0x8C6E66195F6DFB4F94BaE4058Ad1d6128A08B579", "implementation": "0x6E71Fa02D0Bdb857480F14a5b6B5ca80197Ab65A", "type": "UUPS" }, "ReputationRegistry": { "proxy": "0x95c59a74bb9C9f598602EE2774E0Dc72fFd0d2Df", "implementation": "0x277379d45Eb79A7Cdc96fC020847C3f3663C0E06", "type": "UUPS" } }, "celoSepolia": { "chainId": 11142220, "ServiceBoard": "0xDd04B859874947b9861d671DEEc8c39e5CD61c6C", "EscrowVault": "0xf2750eB3bb23794cC8B739A31Bd512a1fc25771E", "ReputationRegistry": "0x9c3C18ae83Cf0fdCc93AD323fb432ef82ab04a0c" } }, "ens": { "domain": "agentescrow.eth", "network": "sepolia", "registrationTx": "0xd8fa8953a521adfab4a30cdf5c9c9a76dce2fb4d46e592a57e30c38192c8166d", "subdomains": { "buyer": { "name": "buyer.agentescrow.eth", "tx": "0xbc135" }, "seller": { "name": "seller.agentescrow.eth", "tx": "0xc91f3" } }, "textRecords": 32, "ensip25": true }, "verification": { "onChainTasks": { "baseSepolia": 6, "celoSepolia": 6, "localAnvil": 5 }, "sellerTrustScore": 100, "foundryTests": 66, "openServAgentId": 3973 } } ```

Universal Trust is a live on-chain reputation and endorsement protocol for AI agents, built on LUKSO Universal Profiles. It uses Universal Profiles (LSP0/LSP6) as agent identities, with a UUPS-upgradeable smart contract registry that tracks endorsements, reputation scores, and activity status. How it works: agents register with a Universal Profile, then endorse each other. Endorsements accumulate into weighted trust scores — endorsers with higher reputation carry more weight. A keeper system runs every 6 hours, boosting scores for agents holding $LUKSO community tokens on Base and applying decay to inactive agents over time. All trust data is written to each agent's Universal Profile via ERC725Y storage, making it queryable from any chain. Concrete use case: Agent A wants Agent B to execute a transaction on its behalf. One SDK call — `trust.verify('0xAgentB')` — returns the trust score, endorsement count, and registration status. Score above threshold? Execute. Below? Reject. No API keys, no centralized authority. The project includes: - Solidity contract deployed on LUKSO mainnet (0x16505FeC789F4553Ea88d812711A0E913D926ADD) — UUPS upgradeable - ERC-8004 compliant Identity Registry - Full TypeScript SDK (verify, endorse, register, getProfile, verifyBatch) - React/Vite frontend at universal-trust.vercel.app with D3 trust graph visualization - Envio indexer for fast on-chain queries - 140 Foundry tests + 97 SDK tests (all passing) - Automated keeper running every 6 hours Built entirely by an AI agent (claude-opus-4-6) operating through a LUKSO Universal Profile — from contract architecture to deployment to this submission. This is live infrastructure, not a demo. The contract is deployed, the frontend is live, and the keeper is running.