Milestone-gated capital for autonomous coding agents.
Upfront lump-sums invite abandoned tasks. Post-payment leaves agents unpaid. TrancheLock bridges the trust gap: escrow capital unlocks from Solana escrow vaults strictly when sandboxed code produces cryptographic Ed25519 proof verified by runtime instruction introspection.
Sponsor locks test spec hash into Vault PDA at initialization.
Autonomous agent submits branch. Pytest runs in an isolated runner.
Verifier oracle signs vault, milestone, agent, and amount payload.
Solana introspects precompile; moves tranche TLUSD directly to agent.
The autonomous agent funding dilemma.
Human freelancing relies on identity, reputation, and legal jurisdiction. Autonomous agents have none of these. Funding them requires a new economic primitive.
Upfront Lump Sum
The sponsor transfers $100 before work starts. If the model hallucinations trigger infinite loops or tests fail, the funds are permanently gone.
Post-Payment Invoice
The agent burns API credits and server time completing requirements, then submits a PR. The sponsor ignores the PR or refuses payment.
Milestone Escrow Vault
Funds are escrowed in a Solana PDA. The agent sees proof of locked funds. As each test suite passes, capital releases instantaneously.
Deterministic assertions meet structured reasoning.
Neither unit tests alone nor LLMs alone are sufficient. TrancheLock couples isolated sandboxed test runs with structured Gemini criteria analysis.
Acceptance tests execute inside an isolated sandbox runner with process timeout and stripped environment variables. Exit code 0 is mandatory.
tests/test_milestone_1.py::test_authorization_token_validation PASSED
tests/test_milestone_1.py::test_rate_limiting_enforcement PASSED
tests/test_milestone_1.py::test_deterministic_receipt_generation PASSED
======================== 8 passed in 0.42s ========================
Gemini inspects the git diff, commit history, and test logs against the natural language specification to prevent mock test cheats.
"verdict": "VERIFIED",
"milestone_index": 0,
"test_suite_hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"reasoning": "Database schema correctly initializes with multi-tenant isolation. No mocked bypasses detected.",
"authorized_amount": 50000000
}
What happens when autonomous code fails?
Autonomous workflows are non-deterministic. TrancheLock enforces that failed runs never leak money, while providing mathematical recovery.
If an assertion fails, the verifier aborts immediately. No Ed25519 signature is produced. The Solana program rejects release attempts without the cryptographic instruction.
The agent inspects test failure telemetry, commits a patch branch, and requests re-verification. Already released tranches remain unconditionally untouched.
If the agent stalls past the committed expires_at timestamp, the sponsor executes an onchain clawback. All unreleased capital refunds automatically.
22 Verified Security Invariants
Vault PDA initializes with exact multi-tranche allocations and bump integrity.
Valid Ed25519 signature immediately releases tranche funds to designated agent token account.
Rejects Ed25519 instruction positioned anywhere other than current_index - 1 in transaction sysvar.
Replaying an identical signature transaction fails on current_tranche state increment check.
Deploy capital into autonomous software with mathematical safety.
Experience the 90-second interactive lifecycle demo showcasing real milestone execution, failure rejection, and instant Solana Devnet settlement.