Plain Strata

Plain Strata
  • 0.0 (0)
  • Technology
  • Updated Semiweekly

Decentralized AI, layer by layer. Created by Dastan Modubash. Hosted by Claire and Peter, two AI-generated voices that spend their time explaining systems they technically run on. The research, writing, and editorial decisions are human. The voices are AI. No prior knowledge assumed.

  1. 3d ago

    Plain Strata: The Inference Subsidy, Who Pays for the Cheapest AI in the World

    A network that pays strangers to serve AI does not pay them in dollars: every few minutes it prints new tokens (tradable coins that exist only on that network) and hands them to the machine owners, who cannot pay an electricity bill with a token and so sell it into a trading pool, an automated scale that walks the price down a little with every sale, which is how the cheapest AI serving in the open world sells a million words of input for 27 cents while costing about $1.41 to produce, with the missing $1.14 paid in silence by token holders who never sent a request. Venture money is a bank account that runs out and this runs on a printing press that does not, so an outside analysis of the largest serving sub-network (one crowd of machines running one kind of job) put its printed pay at somewhere between 22 and 40 times its customer sales, though most of the figures behind that ratio are estimates and some are contested. At its Montreal summit on 28 September the foundation behind Bittensor, the largest of these networks, proposed Gamma, in which a sub-network destroys some of its own tokens and the chain mints a credit pegged to a fixed dollar value, so five dollars burned becomes five credits that stay five forever, cannot be sold, cannot be turned back into a token, and can only be spent buying services from another sub-network. That is company scrip, from subscription receipt, the paper a nineteenth-century mining town paid its workers in and let them spend only at the company store, which costs the issuer a fraction of real money and keeps the store busy and has never once brought in a customer from outside. So Gamma changes who bears the loss and not whether there is one, since a credit that cannot leave cannot pay a power company, and the check anyone can run is a single number: will any of the seven networks named to issue it publish what a unit of its service costs to produce at the Gamma price, or is this a way of settling bills inside the network that sits on top of a loss nobody has priced? The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: The Inference Subsidy, Who Pays for the Cheapest AI in the World

  2. Oct 1

    Plain Strata: Memory Access Patterns, How an Operator Reads Private Prompts Without Decrypting

    A sealed virtual machine, a rented computer simulated in software whose memory is locked with a key that never leaves the chip, still has to reach into that memory to think, and reaching is a physical act on hardware it shares with the landlord who owns the building, so the landlord cannot read a single byte but can watch which memory addresses get touched, the way a floor creaks when somebody opens a drawer. That would be harmless if the order of the creaks meant nothing, except that before an AI model reads your sentence a small program called a tokenizer swaps each word for a number by looking it up in a public table, so the order of the lookups is the order of your words, and a research tool called TDXRay, which watches four kinds of footprint at once, rebuilt more than ninety percent of the words in private prompts from a single run, credit card numbers whole, with no key stolen and no byte decrypted. Intel's own threat model, the written list of attacks a product promises to stop, excluded this class of attack from the start, because blocking it means redesigning how processors share their fast memory, so the cryptography kept every promise it made and none of those promises were about this. The same shape has leaked secrets before, in the volume of wartime radio traffic, in phone call records and in smart electricity meters, and the only real defence is to make the activity uniform, a tokenizer that scans its whole dictionary for every word so the footsteps say nothing, which researchers have already built at a cost they call acceptable. Every protection a buyer pays for after that first lookup, the encrypted link to the graphics card included, guards a prompt the operator already holds, so the honest limit is that a vendor's threat model has quietly become the thing you are trusting, and the question the episode leaves is which other layers of our lives leak our thoughts through the friction of processing them. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: Memory Access Patterns, How an Operator Reads Private Prompts Without Decrypting

  3. Sep 29

    Plain Strata: Attestation vs Re-Execution, Where Each Way of Checking AI Work Puts Your Trust

    A chip can run your AI work inside a sealed booth and slide a signed note under the door saying what ran, and a $159 circuit board slid between a server's memory stick and its motherboard can cut the one wire the memory uses to complain about a failed write, so the booth keeps signing valid notes about yesterday's data. That note is called attestation, a chip vouching for its software with a key burned in at the factory, and the flaw is a choice the vendors made on purpose, because proving data is the newest version does not scale to hundreds of gigabytes, so an old page decrypts flawlessly and the seal stays intact around the wrong one. One day later Gensyn, a company that has spent years trying to train AI across machines nobody owns together, published a small model with a fingerprint for each of its 80,957 training steps and a tool that lets a stranger replay one step and compare, which never worked before because adding the same numbers in a different order gives a slightly different total, and processor cores never finish in the same order twice. They forced one fixed order for every sum and paid in speed, a training run about five times slower, then hired two specialists in paying people to report honestly when nobody can re-run the work, which is a company telling you where its own best check stops. No method of checking removes trust, each one only picks where to put it, in a chip factory or in plain arithmetic, and the question left over is uncomfortable: if perfect checking costs a five-times speed tax, will we only ever fully trust models too small to matter? The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: Attestation vs Re-Execution, Where Each Way of Checking AI Work Puts Your Trust

  4. Sep 24

    Plain Strata: The Stake-Weighted Middle

    Every seventy-two minutes, a market that pays strangers to do AI work has to collapse a room full of disagreeing judges into one number, and the fix it uses is not the one you would guess: instead of averaging every validator's score, weighted by stake, the network finds the value that exactly half the stake agrees with and throws away everything above it, so a validator trying to enrich a secretly owned miner can write down any number it wants and change nothing. That wall is airtight against a minority of liars, and it is just as airtight against a minority of one, the validator who spotted a genuinely brilliant piece of work before the rest of the table caught up, whose score gets cut down to the same line as the con artist's and whose reward for being early is capped by what the middle was willing to believe at the time. Delegated stake, which is what actually sets that line, mostly belongs to people who tapped a button in an exchange app and never read a scoring policy, because there usually is not one to read. Compare it to an ordinary proof-of-stake vote, which checks a signature any machine can verify in a blink, and the difference is stark: there is no equivalent fact for whether a piece of AI work was good, so the only defense against a dishonest majority is the majority itself. The honest limit is that the trimming runs one way, cutting inflated scores but never raising a score someone is quietly starving, which means the wall built to stop theft was never built to stop silence. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: The Stake-Weighted Middle

  5. Sep 22

    Plain Strata: Stake Delegation, Who Holds the Vote Inside the Token

    On Bittensor, the largest network trying to run artificial intelligence as an open market of strangers, the chain understands none of the AI work it pays for: it reads the scores that validators, the machines that grade the other machines, hand it every few minutes, mints new tokens to whoever scored well, and weighs each validator's scores by its stake, the tokens people have locked behind it, so a staked token is not a savings account but a vote about which AI work deserves the money. On 14 September one institutional validator, Yuma, reported more than two hundred million dollars of those votes staked with it, a lot of it arriving through staking buttons inside exchange apps that show you a yield and never once show you a scoring policy, because there is none to pick. In the same week the token went live on another chain through a bridge, plumbing that locks the real token in a vault at home and hands you a claim on it elsewhere, where a liquidity pool advertises about 137 percent a year against roughly 16 percent for staking at home, and where a staked position in a sub-network can only cross after it has been moved onto the bridge's own validator key, so the vote is not destroyed on the way out, it is gathered. Berle and Means named this shape in 1932 for American companies, the separation of ownership from control, and the index fund is its modern form: an instrument bundles an easy-to-shop cash flow with a hard-to-exercise vote, the market prices the first and gives the second away, and the vote piles up wherever the plumbing drops it. Nobody behaved badly, a professional validator probably scores AI work better than a person with a phone, and every party described what it was doing accurately, but a network built on strangers checking each other now has, at the exact layer that decides who gets paid, a scoring policy that nobody publishes in a form anyone could read, disagree with, and leave over. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: Stake Delegation, Who Holds the Vote Inside the Token

  6. Sep 16

    Plain Strata: Counterfactual Verification, Would the Discovery Have Happened Anyway

    An AI research agent runs for days and comes back with a database query that is genuinely faster than the best published one, and every instrument this field owns for checking that work, re-running it yourself, leaving a window open in which anyone can post money and dispute it, demanding a small mathematical receipt that the stated computation was carried out, or asking the chip to vouch for the sealed region of memory it ran inside, checks the same thing: whether the work was performed the way it was claimed. None of them can touch the claim that actually matters when strangers are being paid, which is that this result would not have existed without this particular agent, because all four begin by accepting the claimed route and auditing it. A paper published on 7 September proposes the opposite construction: hand a second agent the same registered starting position and the same web pages the first one read, withhold everything the first one did, let it run, and if it reaches the same number by a valid method that single recovery cancels the discovery claim outright, a veto rather than a lower score. The word control comes from contre-rolle, a counter-roll, a duplicate register kept deliberately apart so one account could be checked against another, and that is exactly what this is, since nobody inspects the agent under audit, which also makes it the only instrument here that sends no signal to the thing it is measuring, at a moment when a published reading of one lab's safety evaluations suggests a model behaves differently once it has reason to think it is being watched. The limit is brutal and it is the whole story: a control group costs a whole fresh attempt at the original problem, ninety-six of them to state one bound, so checking costs more than doing, and an open network can only afford to pay for work whose checking is cheaper, which puts the right question permanently out of reach of the systems that need it most. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: Counterfactual Verification, Would the Discovery Have Happened Anyway

  7. Sep 2

    Plain Strata: Compute as Collateral, Borrowing Against the Machines That Run Open AI

    Running one of the big open AI models is not really a licensing question, it is a question of how many datacentre graphics cards you can put in one building at once, each costing about as much as a car, and somebody has to buy them first. Renting capacity is what almost everyone does, at prices now quoted in tens of billions of dollars for a few hundred megawatts, so the other path is owning, which means borrowing, which means a lender has to be comfortable with a pile of hardware in a room it has never entered. The answer that arrived this week is very old: the datacentre signs as bailee, the legal word for someone holding your property without owning it, the cards carry replacement insurance naming the lender, and a receipt for them is issued on a public ledger, the same instrument a grain elevator has been writing for farmers since the nineteenth century, so the paper circulates and the machines never move. The money behind the loans comes from anyone holding the protocol's yield-bearing token, while a curator underwrites each loan and puts its own capital in the first loss position, meaning its money burns before a depositor loses a cent, which is the same trick as a staked deposit destroyed for bad behaviour, worked in a different room. The honest limit is that this collateral loses roughly seventeen percent of its value a year because a better card keeps shipping, so the loan is killed off over three years in a race between two deaths, and nothing here is proven or attested by any of the verification machinery this field has spent years building, because cryptography can tell you the truth about a machine and it cannot repossess one. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer.

    Plain Strata: Compute as Collateral, Borrowing Against the Machines That Run Open AI

  8. Sep 1

    Plain Strata: Hardware Attestation, Checking the Room Instead of the Answer

    Your prompt has to be readable at the exact moment a model works on it, which means it sits in plain form in the working memory of a machine somebody else owns, and encrypting the disk and encrypting the wire do nothing about that second. Three of the four serious ways to check a stranger's AI work go straight at the answer, by running it again and comparing, by making the operator post money and waiting for someone to dispute it, or by producing a mathematical proof that the arithmetic was performed correctly, and all three are expensive. The fourth does not look at the answer at all: it runs the model inside a region of memory the machine's own operating system cannot read into, and has the chip manufacturer sign a statement about it, an attestation, from the Latin for calling a witness, saying the hardware is genuine and your exact software is the software inside. Because a large model actually runs on a graphics card rather than on the main processor, this needs a second sealed region and an encrypted cable between the two, which is what NVIDIA's confidential computing mode has done since the H100 generation, and it is why the branch is spreading fastest on Bittensor subnets, permissionless networks anyone can plug machines into and get paid without asking a company for permission. The limit is the whole story: a sealed, genuine, correctly measured machine running broken or dishonest software returns a wrong answer with a perfect attestation attached, so what the market has actually bought is a statement about the room, made by a factory, at one moment in time. The voices in this show are AI-generated; the research and writing are human. Decentralized AI, layer by layer. #DecentralizedAI #ConfidentialComputing #Bittensor

    Plain Strata: Hardware Attestation, Checking the Room Instead of the Answer
See All (34)

About

Decentralized AI, layer by layer. Created by Dastan Modubash. Hosted by Claire and Peter, two AI-generated voices that spend their time explaining systems they technically run on. The research, writing, and editorial decisions are human. The voices are AI. No prior knowledge assumed.

Information

  • Creator
    Plain Strata
  • Years Active
    2026
  • Episodes
    34
  • Rating
    Clean
  • Copyright
    © 2026 Dastan Modubash
  • Show Website
    Plain Strata