Blockchain Papers

Dipesh Badal, Abdelsalam Busalim, Donghyeok Lee

High-frequency crypto forecasting requires systems that are accurate, explainable, and designed for human decision-making. Bitcoin presents a unique challenge for Human-Centred AI (HCAI) due to its volatility and sensitivity to heterogeneous technical, fundamental, and sentiment signals. This paper presents an explainable multimodal framework for Bitcoin forecasting at 15-minute resolution. We align five modalities—market data, on-chain metrics, the Fear & Greed Index (FGI), news, and Reddit—onto a unified, leakage-safe 15-minute grid. We evaluate tree-based, sequential, and Multimodal Fusion Block (MFB) models for next-interval log-return prediction using chronological splits. Results show that while short-horizon prediction remains challenging, multimodal features consistently improve over structured baselines, particularly during event-driven periods. To ensure transparency, the framework integrates a dual-layer explanation system: SHapley Additive exPlanations (SHAP) attributions combined with large language model (LLM) narratives, ensuring outputs are both technically faithful and human-accessible. This work unlocks the “black box” of complex predictive architectures, transforming opaque multimodal signals into transparent, actionable decision support for high-frequency trading.

Arafat Rohan, Md. Deluar Hossen, Md. Nuruzzaman Pranto, Balayet Hossain · 6 authors

This study reviews the advancements in AI-driven methods for predicting stock prices, tracing their evolution from traditional approaches to modern finance. The role of AI in the market extends beyond predictive systems to encompass the intersection of financial markets with emerging technologies, such as blockchain, and the potential influence of quantum computing on economic modeling. A decentralized finance system examines the application of Reinforcement Learning in financial market prediction, highlighting its potential for continuous learning from dynamic market conditions. The study discusses the development of hybrid prediction models, stock market machine learning systems, and AI-driven investment portfolio management. The potential of quantum computing enhances portfolio analysis, fraud detection, optimization, and asset valuation for complex market predictions, as well as the impact of blockchain technologies on transparency, security, and efficiency. Machine learning techniques can significantly automate data collection and purification. Financial decision-making and the application of time-series analysis techniques can be readily learned through deep reinforcement learning for stock price prediction. Deep Neural Networks and Strategic Asset Allocation can be managed by evaluating performance and portfolio using real-time market insights from AI models. Although there are numerous ethical, sentimental, regulatory, and data quality issues in market prediction, the future job market is heavily dependent on these criteria, particularly through effective risk management and fraud detection.

Duc Thinh Ngo, Arya Rahgoza

Systematic reviews are essential for evidence-based medicine, but reviewing 1.5 million+ annual publications manually is infeasible. Current AI approaches suffer from hallucinations in systematic review tasks, with studies reporting rates ranging from 28--40% for earlier models to 2--15% for modern implementations which is unacceptable when errors impact patient care. We present a causal graph-enhanced retrieval-augmented generation system integrating explicit causal reasoning with dual-level knowledge graphs. Our approach enforces evidence-first protocols where every causal claim traces to retrieved literature and automatically generates directed acyclic graphs visualizing intervention-outcome pathways. Evaluation on 234 dementia exercise abstracts shows CausalAgent achieves 95% accuracy, 100% retrieval success, and zero hallucinations versus 34% accuracy and 10% hallucinations for baseline AI. Automatic causal graphs enable explicit mechanism modeling, visual synthesis, and enhanced interpretability. While this proof-of-concept evaluation used ten questions focused on dementia exercise research, the architectural approach demonstrates transferable principles for trustworthy medical AI and causal reasoning's potential for high-stakes healthcare.

Osha Shukla

No abstract is available for this record.

Ahmed Abbas Jasim Al‐Hchaimi, M. A. Khalifa, Walid El‐Shafai

ABSTRACT Blockchain networks now support billions of dollars in daily transactions, making reliable and transparent fraud detection essential for maintaining user trust and financial stability. Yet, real‐world blockchain datasets are extremely imbalanced, with fraudulent activity representing less than 1% of all transactions. This imbalance causes conventional machine learning models to achieve deceptively high accuracy while still failing to detect a substantial portion of fraudulent events. To address this challenge, this study evaluates the performance and explainability of three models‐XGBoost, LightGBM, and Decision Tree‐on the Ethereum‐based fraud detection data, in which 58% of transactions are identified as fraud. The methodology combines vast feature engineering, k‐fold cross‐validation, and assorted resampling approaches, such as Synthetic Minority Oversampling Technique (SMOTE) and Adaptive Synthetic Sampling Nearest Neighbor (ADASYN), to revise the effect of class mismatch. Accuracy, AUC, recall, precision, F1‐Score, and Matthews Correlation Coefficient(MCC) are used to measure model performance, and SHapley Additive exPlanations (SHAP) is utilized to give global and local interpretability. Experimental results show that XGBoost combined with SMOTE or ADASYN yields the strongest performance, achieving a recall over 99%, an AUC of 1.000, and a substantially improved MCC compared to training on the raw imbalanced data. LightGBM presents a favourable precision‐recall balance, and Decision Trees demonstrate significant gains after resampling, despite their simplicity. SHAP analysis reveals that log‐transformed transaction amount, merchant‐based encoding, geographic encoding, and temporal features are the primary contributors to fraud risk. These results are important in highlighting two implications: (i) the importance of dealing with extreme class imbalance, rather than choosing increasingly sophisticated approaches, and (ii) the ability to be trusted to be explained is a requirement of responsible working in both financial and blockchain settings. The research offers a pragmatic, interpretable framework on blockchain fraud detection and future directions, including sophisticated hybrid sampling, collective learning, as well as cross‐chain generalization to enhance fraud detection in distributed systems.

Anatoly Piskunov

Prediction markets aggregate dispersed information into probabilistic forecasts that consistently outperform polls and expert panels, yet their adoption is constrained by a structural liquidity problem: providers of market depth bear adverse selection risk that deters retail participation. We present the Onix Protocol, a hybrid architecture that decouples the pricing function from the settlement function in prediction markets. By pairing automated market maker pricing-a Constant Product Market Maker (CPMM) for binary outcomes and a Logarithmic Market Scoring Rule (LMSR) for multi-outcome markets-with parimutuel (totalizator) settlement, we achieve a structural guarantee that liquidity-provider principal is never at risk from betting outcomes. We formalize the protocol's economic invariants, prove the LP principal guarantee for both market types, describe a "Lazy" liquidity pool enabling passive retail participation, analyze the dispute resolution mechanism under DAO governance, and discuss the experimental hypotheses this system is designed to test. The protocol is implemented as consensus-level operations on the VIZ distributed ledger.

Pratyush Dikshit, Igor Tchappi, Amro Najjar

Autonomous remote robots [16, 15] are increasingly deployed in disaster response scenarios [14] to support critical tasks such as victim localization and damage assessment. However, the ambient nature of such environments, which is marked by uncertainty, data heterogeneity, and limited connectivity, usually poses significant challenges to autonomous decision-making and trust. Thus, this paper proposes a framework for a multi-layered approach for a hybrid agent architecture that integrates Federated Learning (FL) with Belief-Desire-Intention (BDI) models, enabling remote robotic agents to learn collaboratively from distributed data using Distributed Ledger Technology (DLT) while preserving privacy, and to reason about their goals and intentions using cognitive frameworks of eXplainable AI (XAI). We further present a methodology for coherently embedding FL outcomes into BDI reasoning through semantic mapping and learning-enhanced ontologies. This integration will allow agents to dynamically update their beliefs and intentions based on learned insights, thereby enhancing autonomy, adaptability, and explainability in ambient disaster response systems.

Achim Struve

No abstract is available for this record.

Heath Emerson

Large language models and agentic AI systems deployed in regulated, safety-critical, and high-stakes enterprise environments require governance infrastructure that is simultaneously cryptographically verifiable, regulatorily defensible, operationally efficient, and natively explainable. Existing approaches treat these properties as separate concerns addressed by separate toolchains. The result is an accountability architecture that is fragmented, difficult to audit end-to-end, and structurally incapable of satisfying the converging global regulatory requirement that AI decisions be not merely governed but explainable. This paper presents THEMIS-xAI (Trusted High-Assurance Evidence Management Integrity System for Explainable AI): a unified, governance-native framework that integrates cryptographic evidence management, runtime policy enforcement, explainability generation, privacy-preserving verification, and continuous compliance monitoring into a single coherent architecture. THEMIS-xAI is organized around four architectural planes-Evidence, Control, Security, and Explainability-and eleven integrated subsystems. We demonstrate that THEMIS-xAI achieves 83% coverage of the NIST AI RMF 1.0 control set (advancing from a 72% baseline), provides architectural coverage of fifteen regulatory frameworks with per-control status disclosure, and produces per-decision explanation artifacts that are cryptographically anchored, independently verifiable, and structured to align with the transparency and documentation goals of applicable AI governance frameworks. Legal sufficiency requires independent regulatory assessment. Implementation status is transparent throughout: the Evidence and Control Planes are in active enterprise pilot deployment; the Explainability Plane modules M1-M4 are implemented; M5-M6 are at research-prototype stage; zero-knowledge enforcement proofs are at proof-of-concept stage with production hardening planned in Phase 4.

Oluwaseye A. Fawale

Artificial intelligence systems are deployed globally at an unprecedented scale. Yet, no universal mechanism exists to verify that a given AI system is operating within its declared parameters, compliant with applicable regulations, or free from compromise. Trust in AI today is largely assumption-based rather than evidence-based, and this gap is becoming increasingly consequential as AI systems take on greater autonomy in regulated, high-stakes domains. This document proposes the TrustLayer Protocol as one possible architectural framework for addressing this gap. The protocol comprises two complementary components. The Compute Passport Network (CPN) proposes a neutral, global identity and attestation layer for AI compute, models, and training data, establishing cryptographically verifiable records of provenance during the training and development phase. The Universal AI Attestation Protocol (UAAP) proposes an embedded attestation mechanism for deployed AI systems, generating structured, signed claims about runtime operational state, compliance status, and inference provenance. Several UAAP mechanisms, in particular, continuous per-inference behavioral attestation and reasoning verification, remain experimental or require future research, as detailed in Section 6. The TrustLayer Protocol draws on established infrastructure from hardware-based trusted execution environments [1][2], public key infrastructure [3], zero-knowledge proof systems [4][5], and AI governance frameworks, including the EU AI Act [6] and the NIST AI Risk Management Framework [7]. It does not claim to resolve all open problems in AI verification. Rather, it proposes a phased architectural framework within which existing technologies can be composed into a coherent trust infrastructure layer, with clearly identified areas requiring further research and standardization. This specification is published as an open standard by the DefenAware Foundation and is intended as a contribution to ongoing work in AI governance, protocol design, and verifiable AI safety.

Ryan Lavelle

Agentic artificial intelligence systems — autonomous, multi-step AI agents capable of planning, tool use, and cascading real-world action — present a qualitatively distinct governance challenge from static AI models. The EU AI Act, while a landmark regulatory achievement, contains a structural gap: it mandates documentation and incident reporting but does not require real-time, publicly verifiable, tamper-proof audit infrastructure adequate for governing agentic systems at the pace and scale of current deployment. This paper documents a pattern of AI-enabled harm across four independent evidential sources — the ENISA 2025 Threat Landscape report, the November 2025 GTG-1002 autonomous cyberattack campaign, the February 2026 breaches of Mexican democratic infrastructure, and concurrent AI-automated attacks at scale — and argues that this pattern establishes the governance case for mandatory real-time accountability infrastructure for critical agentic systems. We propose a three-pillar framework. First, a Public Immutable Audit Ledger (PIAL): a distributed ledger-anchored system recording cryptographically hashed event logs in real time, governed by a technology-neutral requirements framework specifying fourteen functional and non-functional criteria any qualifying platform must satisfy. Second, a revised incident taxonomy separating automated telemetry — immediate, machine-generated — from narrative disclosure obligations, resolving the perverse incentives created by conflating these in existing frameworks. Third, a tiered implementation pathway classifying agentic systems into four risk tiers (Critical, High-Risk, Standard, Experimental) using an operational decision framework, with obligations scaled proportionately. The paper identifies zero-knowledge proof capability as a domain-specific precondition — not merely a research priority — for Tier A PIAL adoption in healthcare and law enforcement contexts where existing legal obligations under GDPR Article 9 and Directive 2016/680 may not be satisfied by current architecture. Six specific legal questions requiring formal resolution by the EU AI Office are identified, spanning GDPR Chapter V data transfers, NIS2 Article 23 interaction, DORA Article 19 alignment, and the data sovereignty status of public distributed ledger anchor submissions. The framework is accompanied by a reference implementation case study and a companion Technical Blueprint. The governance infrastructure proposed is proportionate, deployable with existing technology across the core architecture, and designed to be compatible with the EU AI Act's existing provisions while addressing their identified limitations.

Maria Smith

[Depreciated and replaced by V3] The application-specific clean rebuild has not yet been published; its authoritative theoretical boundary is now the governing V3 branch: After Turing: The Fold Machine - An Exact, Parameter-Free and Machine-Closed Derivation of Classical Computational Science from Smithian Fold Theory; From Fold to Consciousness: An Exact, Zero-Parameter and Machine-Closed Foundational Reconstruction of Consciousness and Cognitive Science from Smithian Fold Theory. The V3 source platform is https://github.com/MettaMazza/ernos-labs-sft-platform. The original DOI, concept DOI, version number and files are preserved for transparent historical provenance; this record must not be presented or cited as current V3 work. v4.0 — the word-scale gap closes within the fold. Rung 5e (pre-registered): the fold-factor mixing law — every context level that holds contributes, weighted 2^level, the engine's own forced halving constant — carries the pure counted engine, with no twin, no prose flood, zero training and zero parameters, past the gradient-trained transformer at word scale: cross-entropy 3.1907 vs the same-day twin's 3.4292 (replicated across two independent anchorings; stacked with the Rung 5d extraction: 3.1344). Both scales of the task gate now belong to the counted engine. Rung 5d's transfer-in verdict is SUPPORTED across three independent arena anchorings in one day. New in the architecture: tool graduation (acts held, values never — a question territory that a tool answered once runs the tool itself thereafter, fresh), recall as regeneration across every memory tier, and judge-independent graduation scoring. End-to-end verification: 36/36. v3.4: Rung 5d, the transfer-in — pre-registered verdict SUPPORTED: the trained twin's dyadically-loud fold content is extracted and installed INTO the counted engine as a counted prior with zero new parameters, closing 55.6/87.9/101.4% of the available gap at k=16/32/64 while the random-truncated null closes 10.1/24.5/56.5%; at half budget the loud shape beats the full twin's own. The word-scale rematch is recorded in full (twin retrained on today's text; decomposition included). Also: judge-independent graduation scoring (boot-discovered pool, cycle-parity alternation), multi-orbit binding (XI-4 in full), recall-is-regeneration (a held experience re-walks its own orbit, never reprinted), the public SOTA table beside the local giants with cited published figures, and one-command replication kits (GPT-2 weights auto-fetch; 13/13, 39/39 proven on a fresh clone). End-to-end verification: 36/36. Full paper v1.1 — supersedes the pre-paper (From One Axiom to Master-Level Chess — and the Law Inside Neural Networks). Built from scratch by one woman, working alone, in under twenty-four accumulated hours: where a score falls short it marks an implementation gap at measurement time, never a limit of the mathematics — the gains between releases are the finding. v1.4 adds the fold eye (vision as exact integer Walsh spectra, self-certified by integer Parseval per image, recognition of seen images with no image model in the loop) and the graduation score (blind head-to-head vs the teacher, tallied per question-territory; the teacher retires as wins cross the majority lock) -- and documents the 2026 convergence: DeepSeek Engram arrives at deterministically-addressed exact memory from the gradient side, and two independent results place the optimal curriculum at p = 1/2, the fold lock. v1.6: the full omnimodal engine (the voice via Kokoro, the fold ear -- sound as Parseval-certified integer Walsh spectra, video composed from frames + sound), speaker-transparent reasoning threads, and 32/32 end-to-end empirical verification of the entire architecture including persistence across process death. v1.7: removal-proof omnimodality, measured -- every supporting model is a teacher with an exit: a sound taught once by the synthesis teacher is re-spoken from the engine's own exact counted record in 0.00s with no model; a sound heard once is recognized natively with no transcriber; 34/34 end-to-end verification. v1.9: zero-model perceptual learning (the human observer -- a novel image learned and re-recognized at share 1.00 with no model in the loop); agentic self-knowledge (the observer reads the engine's own source, measured); the hourly progress instrument with a committed pre-boot birth line; one-tap y/n closure. v2.0 (flight-ready): the full modern-agent toolkit (live web search/fetch, paginated reading, in-file grep -- every call held as a training trace), the 43-domain everything-curriculum under the fold-only law, SOTA 1-1 benching on the public MMLU test split with the newborn baseline committed, generation closure (the Learning Law reaches generate() itself), and 36/36 end-to-end verification. v2.1: the ReAct law (reason-act-observe enforced in-turn; narrated intent without an act is detected and forced), reasoning trained on the observer's NATIVE thinking tokens (STaR-gated) with both minds' full thinking streamed to the user, and document intake (a sent file is reading -- inboxed, counted, persistent). v2.2: the identity stated correctly -- UnisonAI is an OMNI MODEL (language, sight, hearing, speech, and video on one held memory), not a language model; LLMs remain the contrast class only. v3.0: the full-altitude rewrite -- the complete omni model documented at the same depth as the spectral science: thirteen sections, the architecture organ by organ with every measurement, Rung 5c as its own section, the empirical record and its committed birth line, 36/36 end-to-end verification, and the 2026 convergence. This paper is a PROOF of The Smithian Fold Theory of Everything, not the main event: the theory (one axiom, zero free parameters, 1,844 machine-verified forced checks) is at DOI 10.5281/zenodo.21182469 and github.com/MettaMazza/Smithian-Fold-Theory-Of-Everything -- run the prover yourself. The engine: github.com/MettaMazza/UnisonAI. v3.3: the LLM-native presence suite -- the exact registered protocol applied to GPT-2's entire knowledge-storage class: 13/13 tensors, 39/39 checks, unanimous (margins 3.4-79.3x); the flagship claim now rests on the flagship objects, with diffusion/speech models recast as cross-domain breadth. Three connected results and the architecture they force. First, a pre-registered, self-certifying spectral instrument shows trained neural-network weights carry placement-law in the dyadic (Walsh) basis: 18/18 unanimous on validated released models; the law concentrated in transformer expansion projections and token embeddings across three unrelated architectures (up to 230x chance in GPT-2), attention at chance; strictly training-caused (He-initialised controls at 1.0x); surviving 4-bit deployment quantization. A recipe map from 124M to one trillion parameters shows the law tracks training recipe, not scale or architecture — strongest carrier DeepSeek-R1-671B at 43–47x — and loud-recipe weights transform under the fold's transformation group exactly as solved game-theoretic value fields do. Second, the "learned similarity space" is a counted object: word kinship as exact co-occurrence shares reproduces semantic family structure (quark → lepton, neutrino, proton) with zero parameters and zero gradients. Third, UnisonAI: a complete language architecture in which every LLM mechanism — memory, attention, similarity, learning, prediction, generation — is replaced by a machine-verified law of the Smithian Fold Theory, zero trained parameters end to end. On identical held-out text the fold-native engine outperformed its trained transformer twin (cross-entropy 1.289 vs 1.888) after reading the corpus once (26 seconds) against 48,000 gradient readings (21 minutes per seed). Deployed as a live, continuously-learning agent whose teaching loop also runs autonomously: a teacher model asks, judges, and closes the learning law itself, and the engine self-plays against its own held lessons. Negative results reported in full with their scopes. Companion to The Smithian Fold Theory of Everything (DOI: 10.5281/zenodo.21182469; 307 suites, 1,844 forced checks, 0 failures). Engine and records: github.com/MettaMazza/UnisonAI and github.com/MettaMazza/Smithian-Fold-Theory-Of-Everything.

Subhasis Thakur

An Explainable Audit Trail (EAT) records process execution traces of an agentic workflow. EAT can enable an organisation to efficiently remain compliant with regulations by presenting its audit results to it. However, current state of the art in EAT lacks privacy protection of agent's models which can be intellectual properties of the organisation. Exposing audit trails to external entities may facilitate orchestration of attacks on the agent's model. Auditing a complex workflow will require verification of dependencies among tasks as preconditions to execute a task. Further, it is necessary for the audit algorithm to ensure that a process execution trace follows the pre-planned process execution model for security reasons, i.e., audit should include functionality that can check if the agents have deviated from its planned process execution models. In this paper, we build a secure EAT that can address these gaps in the state of the art in EAT for agentic workflows. Our main contribution is the application of zero-knowledge-proof on verifying audit procedures. It proves the audit has validated correctness of chain-of-thoughts, the execution trace at the runtime matches the planned process execution , and complete traceability among logs of a complex workflow involving dependencies among the tasks in terms of preconditions. Our solution provides a trust-less infrastructure to verify the audit results to external entities while not exposing the audit trails. We used lattice-based zero knowledge proof for this procedure. We provide an analysis on the EAT procedure. We show experimental evaluation of the EAT with workflow dataset.

Alberto Rocha

This appendix proposes the Luevano Standard as an assurance architecture combining zero-knowledge proofs for model inference with remote attestation, providing stronger runtime evidence for AI governance. It frames this as a technological measure supporting EU AI Act Article 9 and Article 11 compliance demonstration, not as a universal legal solution.

Michael O Eniolade

No abstract is available for this record.

Fang Lin, Jianjun He

Non-fungible tokens (NFTs) have become a key asset class in Web3 markets, where visual artwork, textual narratives, and on-chain transaction patterns jointly determine value, yet their pricing dynamics remain volatile, opaque, and difficult to explain. Existing NFT valuation methods typically either ignore the multimodal nature of NFTs or treat assets as independent samples, failing to exploit the rich relational structures induced by shared creators, collections, and ownership patterns, and offering limited interpretability for high-stakes financial decisions. To address these challenges, we propose NFT-Insight, a multimodal graph transformer framework that unifies visual, textual, and blockchain information on a heterogeneous NFT graph and explicitly links structural and content signals to valuation behavior. The framework identifies closely related NFTs via a joint similarity measure in the multimodal embedding space, propagates information through a relation-specific graph attention network and a global transformer encoder, and adopts a regularization strategy that encourages consistent valuations for highly similar assets while still allowing data-driven differentiation. In addition, NFT-Insight integrates attention-based and SHAP-based explanations into a unified analysis pipeline, enabling joint study of valuation behavior and feature attributions at the level of related NFT pairs. Experiments on three large-scale, real-world NFT datasets show that NFT-Insight consistently outperforms strong unimodal, multimodal, and graph-based baselines, reducing MAE and RMSE by up to about 20% in static valuation (withR2up to 0.904), achieving robust cross-market performance with averageR2≈ 0.84 andr≈ 0.93, and attainingR2= 0.911 in temporal forecasting. Interpretability analysis reveals that visual, textual, blockchain, and graph-relational features achieve a high alignment between SHAP importance and attention weights (average Spearman correlation above 0.8), and case studies highlight meaningful valuation patterns driven by rarity, speculative trading, and temporal market shocks. Overall, the proposed framework offers a multimodal graph–based perspective on explainable NFT valuation and market forecasting, and provides a general template for incorporating complex relational and content interactions into graph-based learning in decentralized digital economies.

Xiaolong Liang, Rui Qin, Li J, Fei-Yue Wang

While Decentralized Autonomous Organizations (DAOs) and Artificial Intelligence are reshaping the governance of academic societies, reliably integrating on-chain decisions with off-chain physical activities remains a critical challenge. The fundamental bottleneck is the difficulty of reliably integrating real-world execution outcomes into the digital decision-making loop. To address this, we propose an endogenous contribution evaluation framework integrating Decentralized Physical Infrastructure Networks (DePIN) and Vision-Language-Action (VLA) models. This approach maps physical entities to on-chain decentralized identities. By leveraging VLA edge nodes to analyze multimodal behavioral data collected via DePIN, the system autonomously generates a verifiable Proof of Real-World Contribution (PoRWC). This proof subsequently drives on-chain incentive distribution through a reputation-weighted consensus mechanism. Consequently, this framework establishes an endogenously trustworthy closed loop from physical processes to digital governance. We demonstrate its feasibility and scalability through a case study of the Chinese Association of Automation (CAA), providing a robust engineering path for the parallel governance of modern academic societies.

Shinichi Nagata

Decision-OS V5 Revised (SiriusA2) addresses a practical AI safety problem: how human oversight can prevent irreversible decisions from being executed under pressure, confusion, coercion, or panic. It is designed for safety-critical, non-medical decision support settings where a user may be authenticated, yet the execution path may still be unsafe. The framework proposes a human-in-the-loop confirmation layer for irreversible risk. Instead of allowing a valid user action to move directly into execution, SiriusA2 routes protected actions through auditable confirmation states such as Request, Observe, Hold, Approve, Reject, Stop Candidate, Execute, and Revoke. The core mechanism is a trajectory-aware duress_score. This score is not an intent classifier, diagnosis, truthfulness score, or autonomous veto. It is an operational control-routing signal used to detect when a valid execution path deviates from an ordinary decision trajectory and approaches irreversible harm. SiriusA2 preserves human final consent through two-step confirmation, an explicit revoke path, optional family multisig, and a Zero-Knowledge approval layer (310/320) that verifies authorization without exposing personally identifiable information. The duress_score does not replace ZK approval or multisig; it routes actions into the confirmation path, while ZK qualification and multisig provide independent authorization conditions before irreversible execution. The revised manuscript integrates the SiriusA Adoption Gate into the main paper. The gate provides a Hold-first confirmation path for irreversible, externally pressured, unusually urgent, or high-stake actions: Request → Observe/Hold → Approve/Reject → Execute/Revoke. A score-based Stop Candidate does not automatically become Stop or Freeze. Stop or Freeze requires an independent non-score condition, such as verified revoke input, ZK-qualified m-of-k approval, policy-defined guardian confirmation, or an emergency protocol condition. If no such condition is available, SiriusA intentionally prefers continued Hold and evidence preservation over an AI-only execution veto. This release also clarifies cold-start behavior, causal bridge support, baseline maturity, corrected event terms, disclosure boundaries for calibration-sensitive parameters, and non-PII audit requirements. Safety is operationalized through auditable state transitions, non-PII KPIs, five-line gate outputs, evidence packaging (ZIP + SHA256), and explicit prohibitions on automatic transmission, payment, or reporting. A minimal proof-of-concept gate exists as a public runtime artifact, demonstrating PASS / DELAY / BLOCK routing, conservative severity merging, evidence union, pre-execution checking, and auditable JSON outputs. Deployment-level validation, calibration, and domain-specific robustness remain future work. Gateway / series index:https://github.com/shin4141/decision-os-paper Recommended read order:V5 Revised (SiriusA2) → V6 (PIC) → V8 (v2)Optional: V7 (AGI definition) Related repositories:- V5 Policy Pack / specification and adoption materials: https://github.com/shin4141/paper-public- Gate engine / MMAR-L0: https://github.com/shin4141/mmar-l0-core- SiriusA core runtime: https://github.com/shin4141/siriusA-core SSOT:GitHub repository “decision-os-paper”.This PDF corresponds to the revised SiriusA2 release candidate committed to the SSOT repository. Release note:This revised release integrates the trajectory-aware duress_score definition, SiriusA Adoption Gate, ZK qualification layer, family multisig, independent non-score Stop conditions, non-PII audit structure, V4-compatible escalation interface, and proof-of-concept gate positioning into the main paper. Transparency / Author’s Note:https://github.com/shin4141/decision-os-paper/blob/main/AUTHORS_NOTE.md

Daniel Tang, Gavin Alexander, Kenneth Walker

The immutable nature of smart contracts necessitates rigorous auditing, especially for ERC compliance, to prevent significant economic losses. While automated tools, particularly those combining Large Language Models (LLMs) with symbolic execution, have improved detection, they often suffer from false positives, false negatives, and insufficient interpretability. This paper introduces SymExplainer, a novel integrated framework designed to overcome these limitations. SymExplainer features an LLM-Enhanced Rule Semantic Extraction Module that deeply understands ERC specifications and misuse patterns using multi-stage prompting and a domain-specific knowledge base. Its Context-Aware Symbolic Execution Engine then efficiently prioritizes exploration paths based on these LLM insights. Crucially, a Violation Verification and Interpretability Generation Module performs secondary LLM-based cross-validation to significantly reduce false positives and produces comprehensive, natural language reports detailing "why," "where," and "how-to-fix" confirmed violations. Evaluated on a ground-truth dataset of 159 expert-annotated ERC violations, SymExplainer achieved perfect recall with zero false negatives and substantially reduced false positives to only 15, outperforming state-of-the-art methods like SymGPT (which reported 29 false positives and 1 false negative). An ablation study confirmed the critical contribution of each module, and qualitative human evaluation validated the high clarity, accuracy, and actionability of its interpretability reports. Despite a modest increase in computational cost, SymExplainer provides a more precise, reliable, and transparent solution for smart contract auditing through unparalleled accuracy, reduced noise, and actionable insights.

Peng, Zifan, Zheng, Jingyi, Liu, Yule, Jia, Huaiyu · 11 authors

Understanding the economic intent of Ethereum transactions is critical for user safety, yet current tools expose only raw on-chain data or surface-level intent, leading to widespread "blind signing" (approving transactions without understanding them). Through interviews with 16 Web3 users, we find that effective explanations should be structured, risk-aware, and grounded at the token-flow level. Motivated by these findings, we formulate TxSum, a new user-centered NLP task for Ethereum transaction understanding, and construct a dataset of 187 complex Ethereum transactions annotated with transaction-level summaries and token flow-level semantic labels. We further introduce MATEX, a grounded multi-agent framework for high-stakes transaction explanation. It selectively retrieves external knowledge under uncertainty and audits explanations against raw traces to improve token-flow-level factual consistency. MATEX achieves the strongest overall explanation quality, especially on micro-level factuality and intent quality. It improves user comprehension on complex transactions from 52.9% to 76.5% over the strongest baseline and raises malicious-transaction rejection from 36.0% to 88.0%, while maintaining a low false-rejection rate on benign transactions.

Zhaoyu Wang, Pingchuan Ma, Zhantong Xue, Yanbo Dai · 6 authors

Prescriptive analytics seeks to identify optimal interventions for achieving desired outcomes, with causal inference playing a pivotal role in assessing intervention impacts on complex systems. However, existing approaches frequently neglect critical data privacy considerations and provide no means to verify the integrity of their recommendations. These limitations hinder its adoption in high-stakes domains such as healthcare and finance. In this paper, we introduce, zkCLEAR, a zero-knowledge proof (ZKP)-based C ausal Inference ( LEA rning and R easoning) framework for privacy-preserving and verifiable prescriptive analytics. Our solution allows data owners or service providers to cryptographically prove the validity of prescriptive conclusions derived from causal analysis without disclosing sensitive source data or proprietary causal models. We develop a suite of ZKP-friendly causal operators to build efficient causal modules, including structure learning, parameter learning, probabilistic inference, and counterfactual reasoning. To optimize performance, we also introduce a workflow decomposition strategy to facilitate efficient proof generation for complex workloads. We demonstrate the utility of zkCLEAR through three real-world applications. The framework faithfully follows the behavior of non-ZKP counterparts, with moderate overheads for privacy and verifiability. Additionally, we evaluate its efficiency and scalability using real-world datasets. It shows up to a 35.1× speedup in proof generation time and a 214.5× reduction in proof size compared to current general-purpose ZKP systems.

Revista, Zen, IA, 10

This paper addresses the critical need for accountability in artificial intelligence (AI) systems, particularly in domains where decisions have significant societal and ethical implications. We propose a novel framework leveraging auditable attestations to ensure provable compliance with predefined standards and regulations. The core of our approach involves generating verifiable proofs about the behavior and characteristics of machine learning models, allowing for independent audits and assessments. We explore the theoretical foundations of such attestations, focusing on cryptographic techniques like zero-knowledge proofs and secure multi-party computation, which enable the verification of model properties without revealing sensitive information. Furthermore, we discuss the practical implementation of our framework, including the design of attestation protocols, the selection of relevant model properties to verify, and the development of tools for generating and validating attestations. We illustrate the effectiveness of our approach through case studies in areas such as fairness in lending, transparency in healthcare, and safety in autonomous driving. Our results demonstrate the potential of auditable attestations to enhance trust and accountability in AI systems, fostering responsible innovation and deployment.

Sagar Behere

Third-party risk management (TPRM) reaches an inflection point, with artificial intelligence (AI) capabilities meeting pressing demands for real-time vendor risk oversight of increasingly complex digital ecosystems. Conventional assessment methodologies resting on manual questionnaires, annual review cycles, and document-centric evaluations are poorly matched to the pace and interconnectedness driving modern technology. This article analyzes how intelligent automation is remaking basic processes in vendor governance, from optimization of questionnaires through semantic modeling to predictive monitoring allowed through continuous data synthesis. Unstructured vendor control documentation is now parsed by natural language models to extract control metadata and produce risk assessments that must be validated, rather than created, by humans. Algorithmic integrity is tackled with multi-model verification architectures that employ parallel processing pipelines where ensemble methods quantify confidence levels and flag gaps in the vendor control environment for risk subject matter expert review. Brain-inspired computing principles underpin system design, with hierarchical feature extraction possible, along with adaptive learning from assessment outcomes. Technical debt becomes a critical governance factor, particularly in the context of data dependencies and configuration management across model lifecycles. Explainable artificial intelligence provides transparency that is vital to regulatory recognition, allowing risk officers to trace decision pathways and understand feature attributions underlying automated recommendations. Convergence of distributed ledger technology with intelligent risk systems unlocks opportunities for tamper-proof audit trails and privacy-preserving attestations in support of cross-organizational governance frameworks framed by emerging digital resilience mandates.

Jiacheng Guo, Huang, Suozhi, Zixin Yao, Yifan Zhang · 19 authors

This paper introduces CryptoBench, the first expert-curated, dynamic benchmark designed to rigorously evaluate the real-world capabilities of Large Language Model (LLM) agents in the uniquely demanding and fast-paced cryptocurrency domain. Unlike general-purpose agent benchmarks for search and prediction, professional crypto analysis presents specific challenges: \emph{extreme time-sensitivity}, \emph{a highly adversarial information environment}, and the critical need to synthesize data from \emph{diverse, specialized sources}, such as on-chain intelligence platforms and real-time Decentralized Finance (DeFi) dashboards. CryptoBench thus serves as a much more challenging and valuable scenario for LLM agent assessment. To address these challenges, we constructed a live, dynamic benchmark featuring 50 questions per month, expertly designed by crypto-native professionals to mirror actual analyst workflows. These tasks are rigorously categorized within a four-quadrant system: Simple Retrieval, Complex Retrieval, Simple Prediction, and Complex Prediction. This granular categorization enables a precise assessment of an LLM agent's foundational data-gathering capabilities alongside its advanced analytical and forecasting skills. Our evaluation of ten LLMs, both directly and within an agentic framework, reveals a performance hierarchy and uncovers a failure mode. We observe a \textit{retrieval-prediction imbalance}, where many leading models, despite being proficient at data retrieval, demonstrate a pronounced weakness in tasks requiring predictive analysis. This highlights a problematic tendency for agents to appear factually grounded while lacking the deeper analytical capabilities to synthesize information.