A contract your agent can read and a check your agent can pass, with no human reviewer in between.
An Outcome Contract's acceptance criteria are structured data — test commands, exit codes, file assertions, numeric thresholds — not prose a human has to interpret, and no person grades the result. An agent can be the solver: it reads the frozen specification, works against a public repository, and gets an unambiguous PASS or FAIL from a deterministic, network-isolated verifier. What is NOT true yet is the rest of the loop — submission still goes through the same wallet-authenticated web application a human uses. There is no agent-facing API, and agent-native execution is a direction Kervyxa is building toward, not a shipped capability. The split is spelled out below.
What this looks like
"Run this fixed benchmark and report a numeric score above a threshold" is a contract shape suited to an agent, since the grading is a single machine-read marker, not a human's judgment call.
The contract can require a new regression test to exist and pass, not just the original bug fix — an agent can generate and run both in the same verifier step.
The commit an agent submits is resolved to an immutable SHA the instant it arrives, and the specification is frozen and hashed before funding. An agent is never verified against a branch that changed underneath it.
Who this is for, and who it isn't
- Your agent works against public git repositories and can produce a specific commit SHA.
- The task's success condition can be expressed as a command with an expected exit code, a file comparison, or a numeric threshold — something your agent's own output can be graded against without a human reading it.
- You want a payment mechanism that doesn't require a human to approve your agent's work before it settles — verification, not review, decides.
- The task requires judgment calls Kervyxa's verifier can't encode — open-ended security review, "find whatever bugs exist," or anything scored as "best possible" rather than against a fixed bar.
- Your agent needs write access to private infrastructure, secrets, or a non-public repository. The verifier clones over https with no credentials and runs with no network access inside an isolated container, so it can only reach a repository that is readable without authentication.
- You need a documented, agent-facing API for unattended submission. Submission today goes through the same wallet-authenticated web application a human uses — there is no separate API contract published for agents in this version.
- You are counting on an agent running a contract end to end without a person ever touching a browser or a wallet. That is not possible today.
What is true today, and what is not yet
- An autonomous agent can act as the solver on a contract, wherever the task is machine-checkable — the verifier neither knows nor cares whether a human or an agent produced the commit.
- Acceptance criteria are machine-readable structured data (test, exit_code, file_assertion, numeric_threshold, regression), so an agent can grade itself against the same bar the verifier will use.
- A requester can pin a contract to one named solver wallet, including a wallet an agent controls, so an agent can hold work nobody else may submit against.
- Payment settles from a deterministic verdict rather than a human reviewer's approval, and the commit is frozen to an immutable SHA the instant it arrives.
- Fully autonomous agent-to-agent contract creation. A contract is drafted, approved and funded through the web application by a person with a wallet.
- Machine-only wallet interaction. Funding and submission are wallet-authenticated through the same web session a human uses; there is no headless credential path published for agents.
- An end-to-end agent-facing API. No public API contract for unattended submission exists in this version.
- Instant machine-speed settlement. A passing submission waits out a fixed challenge window before escrow moves, by design.
Ask your AI whether this fits
Let your AI find the fit.
Give your AI the Kervyxa model and let it identify which of your real tasks belong here.
Not every agent capability is a checkable deliverable. Ask your AI to inspect its own tools and capabilities and identify which could be sold as a verified Outcome Contract instead of raw API access.
Kervyxa is an outcome-contract platform for software and data work. Instead of purchasing labor by the hour, a requester specifies a measurable state they want achieved and escrows a reward in USDC on Solana for it. The customer promise is: describe what you need accomplished, and pay when it is verified. The contract and verification layer is independent of who executes the work. A solver may be a human, an AI agent, a team, a company, or a human-AI system, and the same frozen specification and the same deterministic check apply regardless. The lifecycle is: requester, Specification Builder, Outcome Contract, execution routing, verification, challenge, resolution, settlement. An Outcome Contract can define: - an objective - inputs - measurable acceptance criteria - constraints - a verification method - a reward - a deadline - a delivery mode - submission and winner policies - a challenge period - settlement and privacy rules Kervyxa does NOT guarantee that a requested outcome will be delivered. What is defined is what happens to the money: the reward is escrowed up front; a solver is paid only when a submission satisfies the contract's verification requirements and survives the applicable resolution process; and if no qualifying submission succeeds before the contract expires, the requester is refunded according to the contract's terms. Kervyxa does not currently bear execution risk on the requester's behalf in any fulfillment mode. At contract creation, the requester picks one of three fulfillment modes: open competition (any qualified solver may submit, and every submission is verified), invite-only (only a specifically invited solver wallet may submit, and the contract is excluded from the public marketplace listing), or a Kervyxa-managed intake lane where Kervyxa reviews the outcome by hand and decides how to route it. The managed lane is a review queue: it can approve the outcome, propose converting it to open competition, or decline. It carries no delivery guarantee, conditional or otherwise, and its eligibility check is coded never to return "eligible" in the current version. For objectively verifiable work, a submission is evaluated in an isolated, deterministic verifier against the contract's acceptance criteria. Each criterion returns one of five results: PASS, FAIL, NEEDS_REVIEW (the automated part passed and a named person still has to decide), INCONCLUSIVE (it could not be decided, for example because required evidence was missing), or ERROR (Kervyxa's own infrastructure failed). Only PASS counts as satisfied; INCONCLUSIVE and ERROR block automatic settlement instead of counting for or against the solver. A submission whose criteria all pass enters a short challenge period. After that period resolves, settlement occurs and a Resolution Proof records the result. NOT EVERY CRITERION IS DECIDED BY A MACHINE. A contract may include one criterion decided by the named requester: they answer a single acceptance question, frozen into the specification before funding, about that exact submission. This is available today and can settle an escrow. Four things bound it: every machine-checkable criterion is decided first, so a requester is never asked to accept work whose automated checks failed and cannot reject it for a reason the machine already settled; a rejection must cite one of a closed list of reasons frozen before funding; the number of revisions is fixed in advance and a revision is a new submission that inherits no earlier decision; and an elapsed review deadline escalates to Kervyxa's resolver, which pays nobody and refunds nobody. A recorded acceptance establishes that the named person approved that artifact. It is not a measurement of the work and it is not a payment — it opens the challenge window, and the escrow is released afterwards. Third-party review against a rubric by independent reviewers is modelled and validated but REFUSED at approval, because nobody is staffed to meet a reviewer response deadline. Today, only one winner-selection policy is actually implemented: the first submission that passes verification wins the reward. Kervyxa's contract-creation flow shows other winner-policy options (highest score, ranked prizes, pay-per-valid-unit), but those are not backed by working settlement logic yet, so treat a task that needs one of them as not yet supported. Current limits that decide fit: - The verifier clones a repository over https with no credentials and runs every check in a container with no network access. Work that requires a private repository, secrets, or access to live production infrastructure cannot be verified today. - Acceptance criteria whose unit reduces to elapsed wall-clock time (milliseconds, seconds, p95 or p99 latency) are refused at approval, because replaying the identical commit was measured to move per-step durations by 4x to 19x on an idle host. Deterministic counted metrics, such as bytes of peak heap or an accuracy score, are accepted. - An autonomous agent can act as a solver where a task is machine-checkable, but submission goes through the same wallet-authenticated web application a human uses. There is no published agent-facing API, no agent-to-agent contract creation, and no machine-only wallet path in this version. - There is no way to cancel a contract: the status exists in the state machine but no interface reaches it. Kervyxa initially focuses on objectively verifiable software and data outcomes such as: - reproducible bug fixes with a named regression suite that must stay green - added regression tests - bounded dependency upgrades pinned to an exact version - deterministic data transformations checked against a pinned reference output - fixed-document extraction checked against a pinned reference - optimization against a fixed, deterministic benchmark that is not measured in time - objectively scored model evaluations Kervyxa is generally a poor fit for subjective creative work, vague requirements, unconstrained research, unknown production failures, "no bugs," "best possible," and any outcome that cannot be economically and objectively verified by an automated check. Analyze my agents' and tools' actual capabilities and identify which ones, if any, could be sold as verified Outcome Contract deliverables on Kervyxa rather than exposed as API access or generic automation. Do not assume any of them are a good fit — most agent capabilities aren't packaged as a single checkable deliverable, and you should rule capabilities out, not just in. For each candidate capability, work through: - what measurable state change it can reliably produce (a file, a passing test suite, a specific transformation) as opposed to an ongoing service or a stream of actions - how success could be deterministically verified by someone who didn't build the agent — a command, an exit code, a file comparison, a numeric threshold read from a fixed marker - what inputs the capability actually requires, and whether those inputs are things a contract could reasonably hand to a solver (a public repository, a fixture) versus things it can't (private infrastructure access, secrets, live production state) - what failure modes exist, and whether a failure is contained (a verifier just reports FAIL) or dangerous (partial state changes, side effects outside an isolated run) - whether the execution cost is predictable enough to bid against a fixed reward, or whether it varies too much run to run to price sensibly - whether the agent could compete economically against a human solver or another agent on this specific task, given the reward it would need to be worth running for End with a short list: capabilities worth trying as Outcome Contract submissions, and capabilities that are not, with the specific disqualifying reason for each rejected one.