Submitted:
03 December 2025
Posted:
05 December 2025
You are already at the latest version
Abstract
Keywords:
- A two-tier architecture separating permissionless verification from permissioned financialization
- Hybrid verification combining ZK proofs (simple tasks) with optimistic verification (complex tasks)
- Federated oracle system with economic security guarantees for compute pricing
- Enterprise-first go-to-market targeting FDA-regulated AI systems with drop-in integration for existing GxP/QMS workflows
- Optional financialization roadmap (see Appendix D) for future compute-backed DeFi primitives
1. Introduction
1.1. The Regulatory Compliance Crisis in AI
- Logs can be tampered with: Centralized databases do not provide cryptographic guarantees of integrity.
- No global auditability: Regulators must trust the organization’s internal systems rather than verifying claims independently.
- Expensive manual audit trails: Pharmaceutical companies spend millions on manual documentation for FDA submissions.
- Lack of provenance tracking: Training pipelines involving multiple vendors create verification gaps.
1.2. ExecMesh: The Enterprise Audit Trail Layer
- Works with your existing infrastructure: No need to migrate computation—ExecMesh wraps existing processes with verification.
- Integrates with GxP/QMS: Designed to complement, not replace, existing quality management systems.
- FDA-ready exports: One-click PDF generation of cryptographically anchored audit trails for regulatory submissions.
- No blockchain expertise required: Enterprise API abstracts all blockchain complexity.
1.3. Core Innovation: Useful Even Without Full ZK Verification
- Data Integrity Proofs: Cryptographic guarantees that training datasets were not tampered with.
- Execution Timestamps: Immutable records of when computation occurred (critical for patent priority, audit trails).
- Pipeline Provenance: Verifiable chains of custody for multi-step workflows (data cleaning → training → validation).
- Reproducibility Guarantees: Proof that identical inputs and configurations were used across runs.
- Dispute Resolution: Cryptographic evidence for arbitration when vendors disagree.
1.4. Structure of This Document
1.5. The Opportunity
- Integration with Existing Systems – ExecMesh complements rather than replaces existing GxP, QMS, and model risk management frameworks.
2. Design Goals and Assumptions
2.1. Design Goals
2.2. Assumptions
2.3. Explicit Assumptions and Limitations
Technical Limitations
- Oracle Trust: Our price oracles rely on a federated trust model with economic security, not pure cryptographic trustlessness [12].
- Groth16 Quantum Vulnerability: Current cryptography is vulnerable to quantum computers (expected 2035+). See Section for a migration plan.
Economic Limitations
- Initial Liquidity: Enterprise-first strategy means limited marketplace liquidity in Year 1–2.
- Regulatory Compliance Costs: $1M+ annually for full financial layer compliance (Phase 4+).
- Collateral Volatility: Compute credit values (if/when financialized) are subject to market fluctuations; liquidation risk for borrowers.
Regulatory Limitations
- US-Only Initially: Financial features (Appendix D) restricted to US users (Phase 4+).
- Accredited Investor Requirement: Fractional ownership limited to accredited investors (Reg D).
- CFTC Registration Timeline: Futures market delayed until 2027 pending regulatory approval.
3. Worked Example: FDA Compliance Workflow
3.1. Scenario: AI-Powered Pathology Diagnostic
- Training dataset provenance and integrity
- Model training reproducibility
- Validation/testing procedures
- Post-market surveillance of inference outputs
3.2. Phase 1: Dataset Ingestion and Integrity
- PathAI receives 50,000 de-identified histopathology images from partner hospitals
- Each image is hashed locally:
- Dataset manifest created:
| Listing 1. Dataset Registration API Call |
| POST /api/v1/datasets/register Body: { "datasetId": "PMA-2026-001-TRAINING", "imageHashes": ["0xabc123...", "0xdef456...", ...], "timestamp": "2026-01-15T10:30:00Z", "hospitalSources": ["Hospital-A", "Hospital-B", ...] } |
- ExecMesh creates Merkle tree of all image hashes
- Root hash committed to Ethereum L2 (Optimism):
- Transaction hash: 0x789abc... (permanent, immutable record)
- Gas cost: $0.02 (single transaction for entire dataset)
- Recomputing image hashes from provided dataset
- Reconstructing Merkle tree
- Comparing root hash to on-chain commitment
3.3. Phase 2: Model Training with Provenance
| Listing 2: Training Job Submission |
| POST /api/v1/training/submit Body: { "modelId": "ResNet50-Cancer-v1", "datasetId": "PMA-2026-001-TRAINING", "hyperparameters": { "learning_rate": 0.001, "batch_size": 32, "epochs": 100 }, "dockerImage": "pathaimodels/resnet50:v2.1", "seed": 42 } |
- PathAI runs training on their existing GPU cluster (no migration required)
-
ExecMesh monitoring agent records:
- –
- Start time: 2026-01-20T09:00:00Z
- –
- End time: 2026-01-22T14:30:00Z
- –
- Final model weights hash:
- –
- Training logs hash:
![]() |
| Listing 3: On-Chain Training Record |
- Obtaining identical dataset (verified via Phase 1 hashes)
- Using identical hyperparameters and seed (committed on-chain)
- Rerunning training
- Comparing final model weights hash
3.4. Phase 3: Validation and Testing
- Separate 10,000-image validation set registered (same process as Phase 1)
- Committed to chain with different dataset ID: PMA-2026-001-VALIDATION
| Listing 4: Validation Run |
| POST /api/v1/inference/batch Body: { "modelId": "ResNet50-Cancer-v1", "modelWeightsHash": "0x789def...", "datasetId": "PMA-2026-001-VALIDATION", "outputFormat": "predictions_with_confidence" } |
-
For each validation image:
- –
- Input hash:
- –
- Output hash:
- –
- Pair stored on-chain
- Accuracy metrics: {Sensitivity 94.2%, Specificity: 96.8%}
- Metrics hash committed alongside results
- Request specific images from PathAI
- Verify image hash matches on-chain commitment
- Rerun inference with committed model weights
- Verify output hash matches commitment
3.5. Phase 4: FDA Submission Package
| Listing 5: Generate FDA Submission Package |
| GET /api/v1/audit/export Query Parameters projectId=PMA-2026-001 format=pdf includeProofs=true |
-
Executive Summary
- Dataset: 50,000 images from 15 hospitals
- Model: ResNet50 architecture
- Performance: 94.2% sensitivity, 96.8% specificity
-
Section A: Data Provenance
- Merkle root: 0xabc123...
- Ethereum L2 transaction: 0x789abc...
- Block number: 12,345,678
- Timestamp: 2026-01-15T10:30:00Z
- Verification instructions for FDA auditor
-
Section B: Training Provenance
- Hyperparameters (committed on-chain)
- Model weights hash
- Training duration: 53.5 hours
- On-chain commitment transaction
-
Section C: Validation Results
- Per-image results table (sample):
| Image ID | Input Hash | Output Hash | On-Chain Tx |
|---|---|---|---|
| IMG-0001 | 0xabc... | 0xdef... | 0x111... |
| IMG-0002 | 0x123... | 0x456... | 0x222... |
| … | … | … | … |
- 4.
-
Section D: Cryptographic Verification Guide
- Step-by-step instructions for FDA auditor
- Links to open-source verification tools
- Example verification commands
3.6. Phase 5: Post-Market Surveillance
- Every inference in production: committed
- Batched daily to reduce costs: $5/day for 1,000 inferences
- Enables retrospective audit of any flagged case
- Hospital provides case ID
- PathAI looks up commitment: found on-chain at block 15,234,567
- Verifies exact input image and model output used
- Demonstrates to FDA/hospital that model performed as validated
3.7. Total Cost and Timeline
- Setup and integration: 2 engineer-weeks ($20k labor)
- On-chain commitments (one-time): $15 total
- Ongoing (1 year post-market): $1,825 ($5/day × 365)
- Total Year 1: $21,840
- ExecMesh integration: 1–2 weeks
- No disruption to existing ML workflows
- FDA submission package generation: 1 hour (automated)
3.8. Key Takeaways
- Drop-in integration: PathAI didn’t migrate compute—ExecMesh wrapped existing processes.
- No full ZK proofs needed: Commitments (hashes) provide sufficient regulatory guarantees for most steps.
- Economically viable: Sub-$25k annual cost vs. $500k+ for manual documentation.
- Cryptographically verifiable: FDA can independently verify claims without trusting PathAI’s internal systems.
- Backward compatible: Complements existing GxP and 21 CFR Part 11 processes rather than replacing them.
4. System Architecture
5. Financial Primitives
6. Economic Model
7. Security Model & Risk Mitigation
8. Regulatory Requirements and Compliance Mapping
9. Discussion: Limitations, Criticisms, and Research Agenda
10. Regulatory Strategy: Two-Tier Architecture
11. Technical Implementation
12. Roadmap & Future Work
13. Conclusions
- Drop-in integration: Works with existing infrastructure; no compute migration required
- Enterprise-first: Sustainable revenue from compliance-driven customers with non-optional needs
- Realistic scope: Core value independent of zkML breakthroughs
- Optional financialization: DeFi features (Appendix D) available but not required
14. Acknowledgments
Appendix A Mathematical Proofs & Formal Verification
Appendix A.1. Collateral Safety Theorem
Appendix A.2. Proof Composition Soundness
Appendix A.3. Oracle Manipulation Resistance
Appendix B Circuit Specifications & Benchmarks
Appendix C API Reference & Integration Guide
Appendix D Future Financialization Roadmap (Phase 4+)
Appendix Important Context
- Demonstrated enterprise adoption and revenue from core compliance business (Phases 1–3)
- Regulatory approvals (CFTC registration for futures, SEC guidance on compute credits as securities)
- Proven demand from compute providers and buyers for financial instruments
- Mature oracle infrastructure with demonstrated manipulation resistance
Regulatory Warnings
- Compute credits used as loan collateral may be classified as securities in some jurisdictions
- Compute futures require CFTC registration as commodity derivatives (US)
- Fractional ownership tokens are likely securities under Howey Test
- KYC/AML requirements apply to all financial features
- Accredited investor restrictions may apply (Regulation D)
Revenue Model Clarification
- ExecMesh has already achieved $5M+ annual revenue from 25+ enterprise compliance customers
- Successful deployment and 2+ years of operation without security incidents
- Multiple third-party DeFi protocols have integrated compute credits
- Liquid secondary markets for compute credits exist
Appendix D.1. Introduction: Compute as an Asset Class
- Traded as financial instruments
- Used as loan collateral
- Hedged against price fluctuations
- Owned fractionally by retail investors
- Regulatory approval for each financial product
- Proven enterprise adoption establishing baseline compute credit value
- Mature oracle infrastructure ($100M+ in economic security)
- Integration with at least 2 major DeFi protocols (Aave, Compound, etc.)
Appendix D.2. Compute Credits: The Base Instrument
Appendix D.2.1. Definition
Appendix D.2.2. Properties
- Fungibility
- Credits of same type/quality are interchangeable
- Verifiability
- ZK proof or commitment ensures work was performed correctly
- Liquidity
- Tradable on secondary markets (OpenSea, Uniswap) if DeFi integration occurs
- Intrinsic Value
- Represents actual computational capacity
Appendix D.2.3. Valuation Formula
- = Current market rate for computation type
- = Quality factor based on provider tier (0.8–1.2)
- = Provider reputation score (0.0–1.0)
- = Time decay factor for expiring credits
Appendix D.3. DeFi Collateral Integration
- DAO governance approval from each protocol
- Demonstrated price stability and liquidity
- Regulatory classification as non-securities (or compliance with securities laws)
Appendix D.3.1. Architecture
![]()
|
| Listing 6: Compute Collateral Adapter Interface (Phase 4+) |
Appendix D.3.2. Collateralization Process
- Deposit: Provider deposits Compute Credit NFTs into vault
- Valuation: Oracle determines current market value
- Borrowing: Provider can borrow up to LTV ratio (typically 75–80%)
- Interest: Borrower pays interest (e.g., 6% APY) to lenders
- Liquidation: If collateral value drops, graduated liquidation occurs
Appendix D.3.3. Example Use Case
- Owns 10 Compute Credits valued at $10,000 total
- Deposits in ExecMesh Vault
- Borrows $7,500 USDC (75% LTV)
- Pays 6% APY interest ($450/year)
- Uses borrowed funds for business operations
- Repays loan when cash flow improves
Appendix D.3.4. Risk Management: Graduated Liquidation
| Health Factor | State | Action | Penalty |
|---|---|---|---|
| Healthy | None | 0% | |
| Warning | Email/alert | 0% | |
| At Risk | Collateral top-up required | 0% | |
| Critical | Partial liquidation (50%) | 2% | |
| Underwater | Full liquidation | 5% |
Appendix D.4. Compute Futures Market
Appendix D.4.1. Concept
- Price risk hedging for customers
- Capacity monetization for providers
- Market-based price discovery
- Liquidity provision by speculators
Appendix D.4.2. Contract Specification
| Parameter | Specification |
|---|---|
| Underlying | Specific compute type (e.g., “100 GPU-hours A100”) |
| Contract Size | Standardized units |
| Expiry | 1, 3, 6, 12 months |
| Settlement | Physical delivery or cash settlement |
| Margin | 10–20% of contract value |
Appendix D.4.3. Example: Customer Hedging
- Needs $500k compute in 6 months
- Current spot price: $5/GPU-hour
- 6-month futures: $5.50/GPU-hour
- Action: Buy futures contract locking in $5.50 price
- Without hedge: Pays $800k
- With hedge: Pays $550k (locked-in price)
- Savings: $250k
Appendix D.5. Market Size and Economic Impact
| Asset Class | Current Market | Compute Potential (Phase 4+) |
|---|---|---|
| Corporate Bonds | $10T | $2–5T |
| REITs | $4T | $1–2T |
| Commodity Futures | $2T | $500B–1T |
| Total | $16T | $3.5–8T |
- Demonstrated 3+ years of security and regulatory compliance
- Achieved $50M+ annual revenue from enterprise customers
- Obtained all necessary regulatory approvals
- Integrated with major DeFi protocols
Appendix D.6. Integration with Existing DeFi Protocols
- DAO governance vote approving compute credits as collateral
- Custom adapter contract (e.g., AaveComputeAdapter)
- Demonstrated price stability ($100M+ TVL in compute credits)
- Oracle security ($100M+ in economic security from staked operators)
Appendix D.6.1. Example: Aave V3 Integration
![]() |
| Listing 7: Aave Compute Adapter (Phase 4+) |
Appendix D.7. Regulatory Considerations
Appendix D.7.1. Securities Classification
- Compute Credits
- Likely utility tokens (represent actual compute capacity), but may be securities in some jurisdictions
- Fractional Tokens
- Almost certainly securities under Howey Test (investment contract)
- Futures Contracts
- Commodity derivatives (CFTC jurisdiction in U.S.)
Appendix D.7.2. Required Registrations
- KYC/AML: Required for transactions exceeding $10,000
- Accredited Investor: May be required for fractional tokens
- Commodity Trading: CFTC registration for futures platform
- Tax Reporting: 1099 forms for U.S. users
- GDPR: Data protection for European users
Appendix D.7.3. Risk Disclosures
- Market volatility risk
- Liquidation risk in leveraged positions
- Smart contract vulnerabilities
- Regulatory uncertainty
- No deposit insurance
Appendix D.8. Phase 4+ Timeline and Prerequisites
Phase 4 Prerequisites (2027)
- $5M+ annual revenue from 25+ enterprise customers (Phase 1–3)
- 2+ years operating history without major security incidents
- Oracle network with $100M+ economic security
- At least one major DeFi protocol partnership (Aave or Compound)
- KYC/AML provider integration
- Legal budget: $1M+ for regulatory compliance
Phase 5 Prerequisites (2028+)
- CFTC registration as Designated Contract Market (DCM)
- $50M+ TVL in compute credits demonstrating price stability
- Secondary market liquidity (Uniswap V3 pools with $10M+ depth)
- Futures market beta with $1M+ daily volume
Appendix D.9. Summary: Optional Financialization
- Strictly optional: Core ExecMesh (Sections 1–12) delivers value without any financial integration
- Dependent on enterprise success: Only viable after proven adoption from compliance customers
- Subject to regulatory approval: Deployment timeline depends on CFTC, SEC, and international regulators
- High capital requirements: Require $100M+ in economic security and $1M+ annual legal/compliance costs
- Long-term vision: Represent Phase 4–5 functionality (2027–2028+), not Year 1–3
References
- U.S. Food and Drug Administration. Electronic Records; Electronic Signatures. Code of Federal Regulations, Title 21, Part 11, 2023. 21 CFR Part 11.
- European Parliament.; Council of the European Union. Regulation (EU) 2024/1689 of the European Parliament and of the Council on Artificial Intelligence (AI Act). Official Journal of the European Union, 2024.
- Board of Governors of the Federal Reserve System.; Office of the Comptroller of the Currency. SR 11-7: Guidance on Model Risk Management. Supervisory Letter SR 11-7, 2011.
- Groth, J. On the Size of Pairing-Based Non-Interactive Arguments. In Proceedings of the Advances in Cryptology – EUROCRYPT 2016. Springer, 2016, Vol. 9666, Lecture Notes in Computer Science, pp. 305–326. [CrossRef]
- Ben-Sasson, E.; Chiesa, A.; Genkin, D.; Tromer, E.; Virza, M. SNARKs for C: Verifying Program Executions Succinctly and in Zero Knowledge. In Proceedings of the Advances in Cryptology – CRYPTO 2013. Springer, 2013, Vol. 8043, Lecture Notes in Computer Science, pp. 90–108. [CrossRef]
- U.S. Food and Drug Administration. Proposed Regulatory Framework for Modifications to Artificial Intelligence/Machine Learning-Based Software as a Medical Device. Discussion paper and request for feedback, 2019.
- Ben-Sasson, E.; Bentov, I.; Horesh, Y.; Riabzev, M. Scalable, Transparent, and Post-Quantum Secure Computational Integrity. IACR Cryptology ePrint Archive 2018, 2018, 46. [Google Scholar]
- Farmer, B.; Alefirenko, M.; et al. Plonky2: Fast Recursive Proofs with Plonk and FRI. Polygon Zero technical report, 2022.
- Bowe, S.; Grigg, J.; Hopwood, D.; et al. Halo 2: Recursive Proof Composition without a Trusted Setup. Zcash protocol documentation and design notes, 2020. Zcash Foundation / Electric Coin Company design.
- Optimism Collective. Optimism: Documentation and Protocol Overview. Online documentation, 2024.
- Offchain Labs. Arbitrum: Developer Documentation. Online documentation, 2024.
- Nazarov, S.; Ellis, S.; Juels, A.; et al. Chainlink: A Decentralized Oracle Network. Whitepaper, 2017.
- Gabizon, A.; Williamson, Z.J.; Ciobotaru, O. PLONK: Permutations over Lagrange-bases for Oecumenical Noninteractive arguments of Knowledge. IACR Cryptology ePrint Archive, Report 2019/953, 2019.
- Nakamoto, S. Bitcoin: A Peer-to-Peer Electronic Cash System. Bitcoin.org Whitepaper 2008. [Google Scholar]
- Buterin, V. A Next-Generation Smart Contract and Decentralized Application Platform. Ethereum Whitepaper, 2014.
- Wood, G. Ethereum: A Secure Decentralised Generalised Transaction Ledger. Ethereum Yellow Paper, 2014.
- Aave Protocol. Aave Protocol v2: Documentation. Protocol documentation, 2020.
- Adams, H.; Zinsmeister, N.; Salem, M.; Keefer, R.; Robinson, D. Uniswap v3 Core. In Proceedings of the Uniswap v3 Core Whitepaper, 2021.
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2025 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (http://creativecommons.org/licenses/by/4.0/).




