The verification layer for AI and digital claims

Trust should never
be optional.

TENUP lets any prediction, document, AI output, report, certificate or digital claim be cryptographically sealed on-chain before it is revealed — so it can be checked by anyone, later, without trusting whoever published it.

0
Pages of spec
0
Applications mapped
0
Threats mitigated
Nov 2026
Public testnet
Scroll
The problem

Digital evidence stopped meaning anything.

Anything on a screen can be produced, edited or deleted after the fact — and generative models made that cheap enough to do at scale. Every claim now arrives with an implicit question: was this really said, then?

01
Fabricated screenshots
A prediction that never existed is one image edit away from looking authoritative.
02
Silently edited documents
Contracts, reports and filings change without any record that a previous version existed.
03
Deleted predictions
Publish ten forecasts, delete nine, keep the winner. The track record survives; the losses do not.
04
Unattributable AI output
No record of which model, which version, or what it actually returned before the answer was cleaned up.
05
Forged credentials
Diplomas, audits and compliance certificates are verified by phone calls and PDFs.
06
Trust by reputation
The only recourse today is to believe the publisher, or to audit them at enormous cost.
The protocol

Seal it now. Open it later. Anyone can check.

Five steps, no crypto knowledge required of the person checking. The only thing published up front is a fingerprint — useless to a competitor, decisive to an auditor.

Step 01
Produce the claim
A forecast, a model output, a report, a certificate — any structured content.
Step 02
Fingerprint it
Canonicalise, add a random nonce, hash. The hash reveals nothing about the content.
Step 03
Anchor on-chain
The fingerprint gets a block height and a timestamp nobody can move.
Step 04
Reveal on schedule
The full content and nonce are published inside a window fixed at anchor time.
Step 05
Anyone verifies
Re-hash the content, compare to the anchor. Either it matches or it does not.
fingerprint = keccak256( canonical(content) ‖ nonce )Miss the reveal window and the anchor stays public, permanently marked Expired. Withholding is visible, so it costs more than publishing.
Applications

One primitive, twelve industries.

Anywhere a claim needs to be provably older than its outcome, the same commit–reveal cycle applies. The protocol does not care what the content is.

Explore every use case
FLAGSHIP
AI trading signals
Every forecast is anchored before the market moves, so a track record cannot be curated after the fact.
AI research
Register results and hypotheses ahead of publication. Pre-registration without a registry to trust.
Education
Credentials that an employer verifies in a second, from the anchor, with no call to the registrar.
Exam integrity
Anchor a paper before distribution; a leak becomes provable, and so does its absence.
Legal documents
Proof that a version existed at a moment — for disputes, filings and chain of custody.
Medical records
Anchor the hash, keep the record private. Tamper-evidence without exposing patient data.
Public records
Procurement decisions and disclosures anchored at the moment they are made, not when questioned.
Journalism
A published story carries its own edit history. Corrections show as corrections, not rewrites.
Insurance claims
Evidence anchored at first notice of loss, before any incentive to revise it appears.
Enterprise AI
Model ID, prompt hash and output anchored per inference — an audit trail regulators can replay.
Intellectual property
Proof of creation with a timestamp, without publishing the work itself.
Financial reporting
Anchored statements and forecasts, so restatements are visible as changes rather than history.
Flagship application

The first application built on TENUP.

AI trading signals are the hardest possible test of the protocol: a claim with money attached, an outcome minutes away, and every incentive to revise history. If verification holds here, it holds anywhere.

signals · exampleANCHORED
BTCUSDT5m
LONG
Entry zone64,250 – 64,290
Take profit64,520 · 64,780 · 65,150
Stop loss63,940
Confidence0.74
✓ VERIFIED0x9f1a4c…
Anchored before the outcome
Direction, entry, ladder, stop and confidence are sealed the second the call goes out — long before the candle closes.
Analytics you can recompute
Hit rate, profit factor, expectancy, Sharpe and drawdown, derived from revealed signals only — with the raw data published to check them.
Complete history, losses included
Unrevealed anchors stay listed as Expired and score against the model. Nothing is deleted.
Example figureswhat the app will publish once signals run
0
Signals
0.0%
Hit rate
0.00
Profit factor
Verification layer

What actually happens on-chain.

Scroll through the four states. The diagram on the left is the same lifecycle every claim on the protocol passes through, whatever the industry.

TenupRegistry.solANCHORED
merkle rootclaimclaimclaimclaim
fingerprint0x9f1a4c…
blockblock height
statewindow T₀+5m → T₀+8h
The fingerprint is written the moment the claim is created. It carries a timestamp and a block height, and nothing about the content itself.
01Anchor

The content is canonicalised with JCS — sorted keys, no whitespace, deterministic numbers — then hashed with keccak256 against a 32-byte random nonce. Only the hash is submitted, so anyone watching the mempool learns nothing.

keccak256( canonical(content) ‖ nonce )
02Batch

Claims inside a window become leaves of a Merkle tree, and one root goes on-chain. Cost stays flat as volume grows — a university anchoring 40,000 diplomas pays roughly what a single claim costs — and each item is still provable individually.

03Reveal

Content, nonce and Merkle proof are submitted inside the window fixed at anchor time. The contract recomputes the leaf and walks it to the stored root. Too early leaks a live claim; too late and the anchor is permanently marked Expired.

04Verify

Anyone re-hashes the revealed content and compares it to the anchor using the open-source verifier. The Explorer shows block height, wall-clock time and finality. No step depends on trusting TENUP or the publisher.

ExplorerExample dataExplorer API ↗
FingerprintApplicationBlockRevealedState
0x9f1a4c…signals248,310,774T₀+2h14mVerified
0x4b77e1…credentials248,310,702Awaiting
0xc0d3a2…research248,309,918T₀+9dVerified
0x71ea08…signals248,309,441Expired
0x2d90bb…enterprise-ai248,308,860T₀+1h47mVerified
Why a blockchain

Because a database can be edited by whoever owns it.

Centralised log
You have to trust the operator not to rewrite rows.
Timestamps come from a clock the operator controls.
Auditing means paying someone to inspect the operator.
If the company disappears, the evidence disappears too.
TENUP anchor
The fingerprint is public before the outcome is known.
The timestamp belongs to the network, not the publisher.
Verification is a hash comparison anyone can run in a second.
The proof outlives the company that created it.

Only the fingerprint goes on-chain — never the document, the patient record or the model weights. Privacy is preserved by construction, because a hash is not the content.

Developer platform

Two calls to make anything verifiable.

Anchor a claim, reveal it later. The protocol handles canonicalisation, nonce generation, Merkle batching and window enforcement. You never touch a wallet or pay gas directly.

Verification API
REST endpoints for anchor, reveal and status. Idempotent, versioned, region-pinned.
SDKs
TypeScript, Python and Go. The verifier is open source so third parties can check you independently.
Webhooks & Explorer API
Subscribe to anchored, revealed, verified and expired events; query any claim's full lifecycle.
Certificate API
Issue and revoke credentials in bulk, with a public verification page per certificate.
// seal a claim before its outcome is known
const anchor = await tenup.anchor({
  app: "research",
  content: { hypothesis, dataset, method },
  revealAfter: "7d",
  revealBefore: "30d"
});

// → {
// →   id: "anc_8Kd2m…",
// →   fingerprint: "0x9f1a4c…",
// →   block: 248310774,
// →   state: "anchored"
// → }
Sandbox keys, no wallet required.Read the docs →
$TENUP

The token is not the product. It meters the protocol.

Fixed supply of 100,000,000 on Arbitrum. It pays for verification capacity, secures the marketplace through staking, and governs the parameters that make anchors credible. No equity, no debt, no revenue rights.

01
Verification credits
Anchors, reveals and bulk certificate issuance draw on credits — cheapest when paid in $TENUP.
02
Access & API tiers
Free through Elite. Higher tiers add throughput, priority anchoring latency and enterprise SLAs.
03
Staking & slashing
Publishers stake to list in the marketplace. Repeated expired anchors are slashed — reputation with collateral behind it.
04
Governance & buyback
Holders vote on reveal windows, slashing rules and listings. A share of net revenue buys and burns $TENUP through a timelocked contract.
Allocation
100,000,000 $TENUP · fixed supply
Community & rewards 40%
48m linear
Treasury & ecosystem 20%
6m cliff + 36m
Team 15%
12m cliff + 48m
Liquidity 10%
unlocked
Investors 10%
6m cliff + 24m
Early user airdrop 5%
at TGE
Ecosystem

Everything settles against the same anchor.

Producers anchor claims. Consumers verify them. Neither has to trust the other, or us.Integrate the protocol →
Roadmap

Protocol first, network last.

The contracts and the verifier are being built now. Testnet follows, then mainnet — each phase shipping only once the one beneath it holds.

Phase 1In development

Foundations

In progress

The verification contracts, the open-source verifier and the CLI — the parts everything else depends on.

  • Verification contracts
  • Verifier SDK and CLI
  • Public Explorer
Phase 2Upcoming

Public testnet

November 2026

Anchor and reveal real artifacts on testnet with sandbox keys, and verify them from a second machine.

  • Testnet anchoring
  • Sandbox API keys
  • Explorer on testnet
Phase 3Upcoming

Mainnet

January 2027

The registry goes live, with batching for volume and webhooks for state changes. External audit before launch.

  • Registry on mainnet
  • Batch anchoring
  • Webhooks and dashboards
Phase 4Planned

Applications & institutions

2027

Signals as the proving ground, then credentials at institutional scale and per-inference anchoring for enterprise models.

  • Signal verification
  • Credentials and certificates
  • Enterprise and university deployments
Phase 5Planned

Global verification network

Beyond

Independent verifiers, multi-chain anchoring and governance over the parameters that make anchors credible.

  • Multi-chain anchoring
  • Token governance
  • Independent verifiers

Dates are targets, not commitments. Phases, parameters and figures may change as the protocol is built and audited.

Cover of the TENUP Protocol whitepaper, v2.0
33 pages · v2.0
Whitepaper · v2.0

The protocol, specified in full.

33 pages on how arbitrary digital content is serialized, fingerprinted, committed to a public chain, revealed and independently verified — written for engineers integrating the SDK, reviewers auditing the contracts, and institutions assessing the network.

03Executive summary
05Why verification is essential
07The solution
09Protocol architecture
11How verification works
17Storage & privacy modes
Contact

Tell us what you need to prove.

Whether you are integrating the SDK, evaluating the protocol for an institution, or reviewing the contracts — start here and we will route it to the right person.

Or reach us directly
contact@tenup.example
Community
X@tenupprotocolSoon
TelegramTENUP communitySoon
DiscordBuilders serverSoon
GitHubVerifier & SDKsSoon
LinkedInTENUP ProtocolSoon
new-enquirydraft
0/4000

Make your claims
checkable by anyone.

Anchor your first claim in a sandbox in under five minutes. No wallet, no gas, no blockchain knowledge required.