Building ERC-8004 Verifiable AI Agents with Automata & Cantina

A TEE-attested agent is an AI agent that uses a Trusted Execution Environment (TEE) to cryptographically prove its integrity and confidentiality. It allows the agent to prove to a smart contract, or any other party, that it is running the correct, unmodified code and that its model weights and private data are secure.

ERC-8004 is a proposed Ethereum standard that formalises trust for autonomous agents. It defines TEE attestation as the core "cryptographic proof" model, allowing agents to register, validate, and build a verifiable, onchain reputation based on hardware-level guarantees.

Remote attestation is the core process an agent uses to prove it is running in a genuine TEE. It is the key component that makes an agent verifiable. This is essential for the agentic age, as it allows a smart contract to cryptographically trust a remote AI agent without trusting its human owner.

DCAP (Data Center Attestation Primitives) is Intel's specific protocol for remote attestation. It is the standard used to verify the integrity of Intel SGX and TDX enclaves, which are common TEEs used to build agents. Verification is often brittle and complex, as it relies on a set of collateral files from Intel that are constantly being updated.

Onchain verification of DCAP Attestation is hard because the attestation collateral (like TCB info and certificates) expires and changes frequently. If a dApp or protocol uses outdated collateral, the verification will fail without warning. This creates a massive operational burden, as projects must manually track and update this collateral 24/7 to prevent service interruptions.

Automata provides a complete, two-part solution to make onchain attestation practical for agents with its DCAP Dashboard, a complete management system that automates the entire collateral lifecycle for Intel SGX/TDX. It anchors all collateral onchain, monitors it 24/7, and automatically pushes updates, eliminating the risk of verification failures. At the same time, it has a suite of Attestation SDKs with broad support for all major TEE families, including Intel SGX/TDX, AMD SEV-SNP, and AWS Nitro. These work with proving programmes like Risc Zero and Succinct to slash gas costs, making TEE attestation viable for agent frameworks like ERC-8004.

The dashboard is built on four pillars to manage the attestation lifecycle:

• Anchor: It publishes all DCAP collateral onchain, creating a single, publicly auditable source of truth.
• Maintain: It provides 24/7 automated upkeep, tracking Intel's TCB changes to keep attestations valid.
• Verify: It provides a simple way to validate an enclave's integrity, either programmatically or by using the dashboard to test and monitor.
• Audit: It includes a built-in activity log that records every collateral update, providing a clear record for accountability.

Automata provides the hardware-level trust with the infrastructure to verify the TEE and the agent's code. Cantina provides a simple, cost-effective way for developers to secure the smart contracts and dApps they build on top of that infrastructure.

Projects building within the Automata ecosystem receive special benefits on Cantina's platform. This includes preferential pricing (a discount) on solutions and complimentary bug bounty programmes to secure their entire application stack.

Visit Automata Network to explore documentation, SDKs, and the live DCAP Dashboard. You can also follow Automata and Cantina for updates on expanding support for verifiable TEEs, onchain attestation, and what's next at the turn of the agentic age.