Milestone Vault testnet

Escrow · AI auditor · NEAR

Pay for a website only when it works.

The client locks NEAR or a stablecoin in a contract. When the freelancer hands in the site (gas-free), two independent AI auditors open it in throwaway sandboxes and check it against the agreed criteria. Both must agree. After a short challenge window the contract pays the freelancer. The auditors' keys can't send money anywhere else, and one hijacked auditor can't pay out alone.

  1. 1Client locks NEAR or tUSDC
  2. 2Freelancer submits the URL, gas paid by a relayer
  3. 32 auditors examine it in sandboxes
  4. 42 of 2 pass → challenge window → paid
Client

– NEAR

– tUSDC

    Freelancer

    – NEAR

    – tUSDC

    Hand in a version of the site gas paid by the relayer

    AI auditors · quorum 2 of 2
    function-call keys · report() / release() only
    Waiting for a submission…
    Attack demo

    Try to rob the vault with a hijacked auditor

    Assume auditor A is fully compromised and the freelancer colludes with it. Each line below is a real signed transaction on testnet using A's real key.

      Code decides

      Pass or fail is plain code comparing measured scores with the criteria the client locked in. The language model only writes the note.

      Sandbox measures

      Each audit runs in a fresh, unprivileged container with no keys. Hostile scripts and hidden instructions on the site are recorded as findings.

      NEAR enforces

      The contract pays only the job's freelancer, only that milestone's amount. Each auditor holds a function-call key that can call report/release and nothing else. The vault has no keys at all: its code can't be changed.

      Quorum + window

      Two independent auditors must both pass a milestone, then the client has a challenge window to dispute before any money moves. One hijacked agent can't pay out.

      Verifiable AI

      The note is written by NEAR AI Cloud inside a TEE. Its signature is checked against a fresh attestation and the proof's hash is stored on chain next to the verdict.

      Real-world money

      Pay in NEAR or a NEP-141 stablecoin. The freelancer submits gas-free through a meta-transaction relayer that only pays for submit. Accountants get a CSV.