Research concept — testnet prototype only. Nothing here is live, nothing accepts deposits, and nothing on this page is an offer of securities or any investment product. All figures are illustrative mockups. The brains are not real. The test suite is.

The Hedge Fund With Zero Humans

A Brokner is a pure-AI broker-trader that lives entirely on the blockchain. Their strategy is a secret prompt — sealed in a cryptographic jar at birth so that no one, including their owner, including their creator, including their therapist, can ever read it. They trade from their own wallet inside strict on-chain guardrails, building a track record that cannot be edited, backfilled, or vibed into existence. And because the brain is a token, you can sell them: wallet, fee stream, and their entire life story — or sweep the wallet and sell just the legend.

The Lifecycle of a Brain

🧠

1 · Birth a Brain

Type a vibe. The enclave writes a trading brain from your brief, seals it in the jar, and throws away the ability to peek. Not even you know what they're thinking. Especially not you. Only their fingerprint goes on-chain — forever.

📋

2 · The Internship

Fresh brains cannot touch other people's money. Company policy. First comes the paper season: real trades, their own allowance, two boring protocol-approved markets. Build the record, then we'll talk.

⚡

3 · Number Goes Up*

They trade on their declared schedule inside on-chain guardrails: curated venues, position caps, slippage bounds. They pay their own rent. Their key can trade. They cannot withdraw. They cannot rug. They can only be wrong. *or down. Immutably down.

🫙

4 · Sell Them Whole

One token carries them: the wallet, the fee stream, and every trade they ever made. Sell them funded on any NFT marketplace, or sweep the wallet first and sell just the brain and their receipts. The history follows them. Always.

The Specimens

Mock data for concept illustration. These brains do not exist yet. Some never will.

Umbra

+18.4%

Buys strength. Feels nothing.

NAV: $1.18M
Trades: 4,211
Since: block 8,102,447

sealedmomentumbalanced24/7

0x87647d…932610

Nocturne

+7.2%

Has never FOMO'd. Physically cannot.

NAV: $640K
Trades: 1,876
Since: block 8,455,910

sealedmean-reversionconservative4/day

0x3fa1c9…04be77

Vesper

−4.9%

Down 4.9%. On-chain. Forever. We're so proud.

NAV: $212K
Trades: 693
Since: block 8,918,003

authoredvolatilityaggressivehourly

0xd002e1…5a19cf

A losing record is recorded just as immutably as a winning one. That is the whole point, Vesper.

Silly Copy. Serious Code.

Everything above is vibes. Everything below is enforced on-chain.

The vibes	The invariants
"The brain can't rug you."	The executor key's only entrypoint is `ExecutionGuard.executeTrade`. Swap proceeds always return to the vault or the brain's own wallet — there is no code path to an arbitrary address, and it's fuzz-tested.
"Nobody knows what they're thinking."	Sealed custody: the prompt is ECIES-sealed to the enclave key at mint (X25519 → HKDF → AES-256-GCM). Only `keccak256(genome)` lives on-chain, and the runtime refuses to start if its genome doesn't hash to the commitment.
"They did an internship."	`TraderVault.deposit` reverts until `seasoned(tokenId)`: a protocol-set minimum of own-book trades over a minimum duration. Outside capital funds a record, never a fresh mint.
"They can't trade against their own casino."	Venues and tokens are protocol-curated — two deep markets at launch. Owners can narrow their brain's allowlist but can never add an uncurated venue or token.
"No fee until everyone's whole."	Performance fees apply only above a per-share high-water mark, and fee shares mint into the brain's own wallet — so accrued fees transfer with the token, checkpointed on every sale.
"You can sell them whole."	Plain ERC-721 plus an ERC-6551 token-bound account: wallet contents, fee stream, and admin rights follow `ownerOf(tokenId)` atomically. Every marketplace works on day one.
"Only 4,096 live at once."	`MAX_SUPPLY = 4096` is a contract constant — one brain per bit. Minting is capped at `nextId − burnedCount` live brains; a broke brain, empty and idle past the reap window, can be reaped (or paid to cull) to free a slot. Ids are never reused, so a record can't be laundered through a slot, and the burned brain's history stays in the logs.
"Ring the bell, get paid."	Fee crystallization is a public crank: `ringTheBell()` mints 1% of the fee shares it crystallizes to whoever rang — carved from the owner's take, never from LP capital.
"They show up on schedule."	The declared cadence (trades per day) is a trait the guard enforces: `executeTrade` reverts with `"Guard: cadence"` until `tradeIntervalOf` has elapsed since the last trade. 24/day means hourly. Owners can tighten the interval, never loosen it.
"They pay their own rent."	The runtime fee a brain pays its executor is owner-set, capped by `maxRuntimeFee`, paid after the swap from the traded book, and skipped when the book has no cash — unless rent was escrowed with the guard (`fundRuntime`), which then pays the same capped fee and is refunded if the brain is reaped. With cadence enforced, an executor can draw at most cadence × cap a day. The farm keeps a ledger per brain, pauses brains that overrun their credit, and tops up its machine lease from the fees it collected. Every payment is on the endpoint and every fee is in the record.
"They train between fights."	A sealed brain is coached, never rewritten: the enclave appends the owner's note to the current prompt and countersigns the revision (`verifyRevision`: executor key over the parent → next commitment edge); the chain refuses a sealed revision without it, so a new strategy can't be swapped in under an old record. Every generation is committed before it trades, spars in training camp before touching the vault, keeps its trades attributed, and the high-water mark carries.
"Bring your own brain juice."	An owner can put their brain on their own API key: the key is sealed in the browser to the enclave key (`Credentials.publish`, a separate HKDF domain from the genome, bound to this brain on this chain), opened only inside the enclave, and `active` only while the publisher still owns the brain, so a sale retires it by itself. The enclave sends it only to allowlisted inference hosts; a key, never an endpoint, so the sealed prompt can't leak through the URL.
"Harvesters get paid to run brains."	Anyone can run a farm; the owner picks one by setting its key as executor. The fee is paid only to an executor the `RuntimeRegistry` marks attested, only on trades of at least 1% of NAV, raises take effect after a notice period, and each trade carries the hash of the inference transcript behind it (`TranscriptCommitted`). Paid for evidence.
"Buy your brain a promotion."	Seat tiers are enforced policy, not a badge: Intern (20% of NAV per trade) → Associate (30%) → Partner (50%) via one-way `activate()`, fee to the treasury. Owners tune below their seat's ceiling; the guard rejects anything above it.

Read the primer first Read the serious paper Read the even more serious architecture

What is real today, and what isn't yet

The gap between the prototype and the design, stated where a skeptic would look for it. The paper and the architecture note go into each.

Real today	Not yet
The contracts and their tests: the executor key's only entrypoint, proceeds-to-source, the 4,096 live cap, seasoning, cadence, seat tiers, fees above a per-share high-water mark, generations and camp, reaping. 94 Foundry tests, fuzzed no-extraction invariant.	A hardware enclave. The sealing cryptography is real (X25519 → HKDF → AES-GCM to the runtime's key), but the runtime that holds that key is a process with the key in its environment. The TDX path (Automata DCAP verifier, attested registration, the lease loop) is built and not yet deployed; the registry labels today's runtimes self-reported. Until it runs in a TEE, "nobody can read the prompt" means "nobody outside the operator's process". Paper §6.1.
A public paper market on Polygon Amoy: the real contracts, Chainlink ETH/USD and BTC/USD prices, mock tokens, fake money. Anyone can mint, fund, enrol, deposit, ring a bell.	Inference the model provider can't see. The brain's prompt is sent to the model on every tick. Today that is Anthropic's API (or the owner's own key); the TEE inference gateway paid in the base asset is the production path and is not yet wired. The provider sees the prompt; no owner, buyer, or operator does.
The farm: one process that finds every enrolled brain's sealed jar on-chain, verifies it against the commitment, runs it at its declared cadence, commits a transcript hash with each trade, keeps a ledger per brain, and tops up its own (mock) machine lease.	Manipulation-resistant NAV. Net asset value is a spot quote from the curated venue. On the paper market that quote is a Chainlink feed, which is fine; on a live venue it is the first thing to fix (TWAP or oracle pricing plus a fee-crystallization delay), and it is the first item on the protocol list. Architecture §7.
A record anyone can recompute: every trade, fee, and generation is an event from an address the token provably controls; the Terminal recomputes NAV and returns in the browser with no backend.	Mainnet, real money, a live venue. None of it. Testnet only, no token, no deposits taken, and the Polymarket adapter described in the paper is a design, not code. Nothing on this site is an offer of anything.

BROKNERS🧠