CasperProver

Cryptographic audit-trail engine for AI agent decisions — Merkle-anchored on-chain, ZK-augmented, post-quantum ready

Commit an agent's inputs & outputs to Casper. Verify the commitment in milliseconds. ZK & PQ layers optional; ZK verification is off-chain (gnark).

Live Demo → · Judge Verification · Architecture · SDK · Status & Roadmap

Three entry points on the landing page: Try the product · For developers (API / SDK / MCP) · For evaluators (Proof & architecture) · Video script

9 smart contracts live on Casper testnet · 248+ transactions on-chain · 32 API endpoints · 32 SDK/MCP tools · 11 interactive lab tabs · Real Groth16 ZK proofs (off-chain, gnark BN254 MiMC) · Post-quantum cryptography (ML-DSA-65 + Ed25519 hybrid) · Merkle-anchored proof-chain DAG

📸 Screenshots

Landing	Lab Overview	Proof Registry

ZK Proofs	Smart Contracts	PQ Crypto

Live at casperprover.xyz

Why This Matters

AI agents are executing critical workflows — KYC checks, financial decisions, compliance rules. But there is no tamper-evident audit trail. Without one, you have to re-run the model to check a past decision, and even that only proves the model can produce the same output — not that this particular decision was made.

CasperProver closes the audit-trail gap. It does not prove the model's internal computation was correct (that is a research-grade zkML problem — see Growth Potential). It commits inputs, outputs and model fingerprint to Casper, so any later party can verify the record has not been altered:

Without CasperProver	With CasperProver
Re-run the model to check a past decision	Verify the Merkle inclusion proof in milliseconds
Trust the agent operator's log	Verify the Merkle root is anchored on-chain
Black-box, mutable log	Merkle-anchored, tamper-evident record
Centralized log (mutable)	Immutable on-chain commitment
No quantum resistance	Post-quantum signing (ML-DSA-65, Lamport OTS)
No economic penalties	Stake-and-slash for dishonest agents

Proof Lifecycle

flowchart LR
    A["🤖 AI Agent"] -->|"input + output + model"| B["🌳 Merkle Builder"]
    B -->|"SHA-256 leaves"| C["📦 Proof Engine"]
    C -->|"Merkle root"| D["⛓️ Casper Network"]
    C -->|"ZK proof"| E["🔐 Groth16 Verifier"]
    C -->|"PQ signature"| F["🛡️ ML-DSA-65 / Lamport"]
    D -->|"on-chain anchor"| G["✅ Verifiable Forever"]
    E -->|"pairing check"| G
    F -->|"quantum-safe"| G

    style A fill:#1a1a2e,stroke:#e53935,color:#fff
    style B fill:#1a1a2e,stroke:#e53935,color:#fff
    style C fill:#1a1a2e,stroke:#e53935,color:#fff
    style D fill:#1a1a2e,stroke:#e53935,color:#fff
    style E fill:#1a1a2e,stroke:#e53935,color:#fff
    style F fill:#1a1a2e,stroke:#e53935,color:#fff
    style G fill:#0d2818,stroke:#22c55e,color:#fff

How it works: Given f(x) = y with model M, CasperProver produces π = MerkleProof(H(x), H(y), H(M)) where H = SHA-256. The root is committed on-chain; the inclusion proof is stored and queryable forever without re-running the model.

For stronger guarantees, the same commitment can be:

ZK-augmented with real BN254 Groth16 circuits (gnark) — proofs generated & verified off-chain in the engine; the resulting proof handle is stored alongside the Merkle root. On-chain Casper verification of Groth16 is not implemented.
Post-quantum signed with hybrid Ed25519+ML-DSA-65 or Lamport OTS
Chained into a DAG with cycle detection and input continuity validation

Key Features

Feature	Description	Status
Merkle Proofs	SHA-256 + Merkle tree, <50ms generation	✅ Live
Real ZK Proofs (off-chain)	BN254 Groth16 via gnark — R1CS circuits, trusted setup, pairing verification runs in the engine; on-chain Casper Groth16 verifier is roadmap	✅ Live (off-chain)
Post-Quantum Crypto	ML-DSA-65 (FIPS 204), hybrid Ed25519+ML-DSA, Lamport OTS	✅ Live
Batch Aggregation	Hash-chain aggregation with Postgres persistence	✅ Live
Proof-Chain DAG	Multi-step proof validation: cycle detection, input continuity, single root	✅ Live
On-Chain Anchoring	9 smart contracts on Casper testnet	✅ Live
Stake & Slash	Economic penalties for revoked proofs, permissionless reporting bounty	✅ Live
KYC Gating	Proof-based DeFi access control with cross-contract verification	✅ Live
SDK (Go)	32 methods, 1:1 API mapping	✅ Live
MCP Server	32 tools for AI agent frameworks	✅ Live
Wallet Connect	CSPR.click SDK — Casper Wallet, Ledger, MetaMask Snap, Google SSO	✅ Live
Interactive Lab	10-tab proof explorer with real API calls	✅ Live

Architecture

graph TB
    subgraph "Frontend (Vite + TypeScript)"
        UI[11 Interactive Tabs]
        WC[CSPR.click Wallet]
    end

    subgraph "Proof Engine (Go)"
        API[32 REST Endpoints]
        MK[Merkle Builder]
        ZK[Groth16 Verifier<br/>gnark BN254]
        PQ[PQ Crypto<br/>ML-DSA-65 · Lamport]
        AG[Batch Aggregator]
        PC[Proof Chain<br/>DAG Validator]
        INF[Inference Service]
        KYC[KYC Demo]
    end

    subgraph "Smart Contracts (Rust / Casper 2.x)"
        PR[proof-registry]
        VG[verifier-gate]
        DM[defi-mock]
        SS[stake-slashing]
        PA[proof-aggregation]
        MR[model-registry]
        POI[proof-of-inference]
        GOV[governance]
    end

    subgraph "Integration Layer"
        SDK[Go SDK · 32 methods]
        MCP[MCP Server · 32 tools]
    end

    subgraph "Storage"
        PG[(PostgreSQL)]
        CS[Casper Testnet]
    end

    UI --> API
    WC --> CS
    API --> MK & ZK & PQ & AG & PC & INF & KYC
    INF --> PR
    INF --> POI
    VG --> PR
    DM --> VG
    SS --> PR
    AG --> PA
    API --> MR
    API --> GOV
    API --> PG
    SDK --> API
    MCP --> API
    PR & VG & DM & SS & PA & MR & POI & GOV --> CS

    style UI fill:#1a1a2e,stroke:#e53935,color:#fff
    style API fill:#1a1a2e,stroke:#e53935,color:#fff
    style CS fill:#1a1a2e,stroke:#22c55e,color:#fff

Quickstart

Prerequisites: Go 1.24+, access to Casper testnet node

git clone https://github.com/anna-stolbovskaja/CasperProver
cd CasperProver
go mod download
go run ./engine/cmd/...

Submit a proof:

curl https://casperprover-api-ylsh.onrender.com/proofs \
  -H "Content-Type: application/json" \
  -d '{
    "agent": "agent-alpha",
    "input": "loan_approval_data",
    "output": "approved_with_conditions",
    "model": "gpt-4o"
  }'

Real ZK proof:

curl https://casperprover-api-ylsh.onrender.com/zk/groth16-real/prove \
  -H "Content-Type: application/json" \
  -d '{"secret": 42}'

Post-quantum hybrid sign:

curl https://casperprover-api-ylsh.onrender.com/pq/hybrid-sign \
  -H "Content-Type: application/json" \
  -d '{"message": "signed with Ed25519 + ML-DSA-65"}'

Proof Types

Type	What it proves	Verification
`merkle-inclusion`	A value was part of a computation	SHA-256 Merkle path
`groth16-real`	Knowledge of a value (ZK)	BN254 pairing check
`kyc-eligibility`	Wallet passed KYC (no PII revealed)	Cross-contract on-chain
`balance-range`	Balance in a range (no exact value)	Merkle proof
`transaction-membership`	A tx was processed by a specific agent	Merkle proof
`proof-chain`	Multi-step DAG integrity	Cycle + continuity check

Smart Contracts (Casper Testnet)

All nine contracts are live — canonical manifest: deploy-out/onchain.json.

Contract	Hash (first…last)	Purpose
proof-registry	`e11088f1…7bc5`	Immutable proof store + reputation
verifier-gate	`06d69182…9b66`	Merkle inclusion checker + whitelist
defi-mock	`fe0c45f6…39ef`	KYC-gated DeFi vault
stake-slashing	`1ad1b3d9…3d52`	Economic penalties (hardened)
proof-aggregation	`b29f32ab…d2bb`	Batched proof anchoring
model-registry	`b3cdd1df…340a`	Model provenance registry
proof-of-inference	`3d772fe1…b318`	Inference attestation ledger
governance	`38d2fbd2…cf3e`	Timelock (48h) + 2-of-3 guardian recovery
zk-verifier	`4500da5d…dc96a1`	On-chain vk registry + off-chain Groth16 verdict recorder

On-chain activity: 248+ testnet transactions across contract deploys and entry-point calls.

Stake & Slash

The stake-slashing contract adds real economic consequences for dishonest agents:

An agent stakes CSPR atomically via session code (purse-to-purse transfer + recording in a single deploy)
Anyone can permissionlessly report a revoked proof via report_and_slash(agent, proof_id) — reads proof state via cross-contract call to proof-registry
20% slash paid to the reporter as a monitoring bounty
Each proof_id is tombstoned after one slash — no double-draining
Verified live: staked 5 CSPR, third-party account called report_and_slash, received 1 CSPR bounty; second attempt correctly reverted

Use Cases

Domain	Application	CasperProver Feature
DeFi & Lending	AI-driven loan approvals with verifiable audit trail	KYC gating, proof anchoring
Healthcare AI	Prove diagnostic recommendations without exposing records	ZK proofs, Merkle verification
Legal & Compliance	Immutable audit trail for GDPR right-to-explanation	On-chain timestamps
Autonomous Agents	Multi-step workflow validation	Proof-chain DAG
Enterprise Governance	Model version tracking across decisions	Model fingerprinting
Cross-Chain	Proofs verifiable by any chain or off-chain system	SDK, MCP integration

Growth Potential

Vertical expansion — deeper integration within each use case:

Full model-inference ZK circuits (prove the entire computation, not just I/O)
Hardware attestation for TEE-based proving (TPM 2.0, SGX, SEV)
Regulatory compliance modules (automated reporting, jurisdiction-specific rules)

Horizontal expansion — new markets and chains:

Multi-chain anchoring (EVM, Solana, Cosmos)
Proof marketplace (agents buy/sell verified computation results)
Cross-agent proof delegation and verification networks
Insurance protocols backed by proof-of-inference

SDK & MCP

Python SDK + `cprover` CLI

pip install -e sdk/python   # or: pip install casperprover-sdk

export CP_BASE_URL=https://casperprover-api-ylsh.onrender.com
cprover health
cprover proofs list
cprover proofs verify <proof_id>
cprover proofs submit --agent-id agent-1 \
    --input "prompt" --output "reply" --model "model-v1" \
    --use-case inference

Entry points: cprover (short), casperprover (long alias). We intentionally do not register cp — it collides with the built-in Unix copy command.

Full CLI reference: docs/CLI.md.

Go SDK (32 methods)

import "github.com/anna-stolbovskaja/CasperProver/sdk"

client := sdk.New("https://casperprover-api-ylsh.onrender.com")
proof, _ := client.SubmitProof(ctx, sdk.ProofInput{...})
zkProof, _ := client.Groth16RealProve(ctx, 42)
sig, _ := client.HybridSign(ctx, "message")
chain, _ := client.ValidateProofChain(ctx, dag)

MCP Server (32 tools)

CASPERPROVER_API_URL=https://casperprover-api-ylsh.onrender.com go run ./sdk/cmd/mcpserver

Every tool maps 1:1 to a live API endpoint. Categories: proofs (7), inference (4), ZK (6), aggregation (5), PQ crypto (4), KYC (3), models (2), proof-chain (1).

Full tool reference: docs/SDK.md

Phase 2 Library (`engine/pkg/phase2/`)

Extended infrastructure — real code, wired to the API:

Module	What it does
`proof_dag.go`	`ValidateDAG()` — cycle detection (DFS), input/output hash continuity, single-root check. Live at `POST /proof-chain/validate`
`hw_attestation.go`	`HardwareAttestor` interface + `SoftwareAttestor` — TPM 2.0, Intel SGX, AMD SEV, ARM TrustZone
`proof_chain.go`	`ProofChain`, `ChainStep` — DAG types with 5 verification statuses
`prover_config.go`	`ProverConfig` — distributed proving with MPC threshold support
`verifier_config.go`	`VerifierConfig` — Optimistic / ZK / Hybrid verification modes
`target_vm.go`	`TargetVM` — CasperVM / EVM / extensible target enum
`attestation_type.go`	`AttestationType` — 5-level attestation (Software → TrustZone)

Performance

Metric	Value
Merkle proof generation	<50ms
Merkle verification	<10ms
Groth16 ZK prove	~200ms
Groth16 ZK verify	<5ms
PQ hybrid sign	<15ms
Proof size	~512 bytes
GPU required	None
API endpoints	32
SDK/MCP tools	32
Smart contracts	9 live on Casper testnet
Testnet transactions	248+

Tech Stack

Layer	Technology
Smart contracts	Rust / Casper 2.x
Proof engine	Go 1.24
ZK proofs	gnark (BN254 Groth16)
PQ crypto	cloudflare/circl (ML-DSA-65), Lamport OTS
API	Go HTTP server + PostgreSQL
Frontend	Vite + TypeScript + Tailwind
SDK	Go client (32 methods)
MCP	Model Context Protocol server (32 tools)
Hosting	Vercel (frontend) · Render (API)
Chain	Casper testnet (`casper-test`)

Project Structure

CasperProver/
├── contracts/              # Rust smart contracts (9 deployed on testnet)
│   ├── proof-registry/     # Immutable proof store
│   ├── verifier-gate/      # Merkle inclusion checker
│   ├── defi-mock/          # KYC-gated DeFi vault
│   ├── stake-slashing/     # Economic penalties + bounty
│   ├── proof-of-inference/ # Full inference proof (written)
│   ├── model-registry/     # Model versioning (written)
│   └── proof-aggregation/  # Batch aggregation (written)
├── engine/                 # Go proof engine
│   ├── cmd/                # Entry point
│   ├── internal/           # Merkle, ZK, PQ, aggregation, inference, KYC
│   └── pkg/phase2/         # DAG validation, HW attestation, proof chains
├── sdk/                    # Go SDK + MCP server (32 tools)
│   ├── client.go           # 1:1 API methods
│   ├── mcp_server.go       # MCP tool definitions
│   └── cmd/mcpserver/      # MCP stdio entry point
├── frontend/               # Vite/TS (10 lab tabs + landing)
└── docs/                   # Architecture, SDK, Status & Roadmap

Legal & policy (drafts)

Self-authored, not-counsel-reviewed drafts of Terms of Service, Acceptable Use Policy, and GDPR-adjacent Data Protection Notice live under LEGAL/. They will be replaced with counsel-reviewed versions before any commercial launch (see docs/MAINNET_LAUNCH_PLAN.md, Pack AK).

License

MPL-2.0 · Last verified: 2026-07-07

↑ back to top

Name		Name	Last commit message	Last commit date
.github		.github
LEGAL		LEGAL
benchmarks		benchmarks
contracts		contracts
deploy-out		deploy-out
deploy/observability		deploy/observability
docs		docs
engine		engine
frontend		frontend
reports		reports
sbom		sbom
scripts		scripts
sdk-ts		sdk-ts
sdk		sdk
site		site
specs		specs
tests		tests
zk/ceremony		zk/ceremony
.editorconfig		.editorconfig
.env.example		.env.example
.gitignore		.gitignore
.golangci.yml		.golangci.yml
.release-please-config.json		.release-please-config.json
.release-please-manifest.json		.release-please-manifest.json
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
Dockerfile		Dockerfile
LICENSE		LICENSE
Makefile		Makefile
README.md		README.md
ROADMAP.md		ROADMAP.md
SECURITY.md		SECURITY.md
config.toml		config.toml
docker-compose.yml		docker-compose.yml
verify.sh		verify.sh

Navigation Menu

Repository files navigation

CasperProver

📸 Screenshots

Why This Matters

Proof Lifecycle

Key Features

Architecture

Quickstart

Proof Types

Smart Contracts (Casper Testnet)

Stake & Slash

Use Cases

Growth Potential

SDK & MCP

Python SDK + `cprover` CLI

Go SDK (32 methods)

MCP Server (32 tools)

Phase 2 Library (`engine/pkg/phase2/`)

Performance

Tech Stack

Project Structure

Legal & policy (drafts)

License

About

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

CasperProver

📸 Screenshots

Why This Matters

Proof Lifecycle

Key Features

Architecture

Quickstart

Proof Types

Smart Contracts (Casper Testnet)

Stake & Slash

Use Cases

Growth Potential

SDK & MCP

Python SDK + cprover CLI

Go SDK (32 methods)

MCP Server (32 tools)

Phase 2 Library (engine/pkg/phase2/)

Performance

Tech Stack

Project Structure

Legal & policy (drafts)

License

About

Topics

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

Python SDK + `cprover` CLI

Phase 2 Library (`engine/pkg/phase2/`)