420 AI security and privacy

Keep raw prompts, datasets, private documents, media, embeddings, outputs, model weights, secrets and API credentials off public chain state unless intentionally public.

A provider signature proves a provider signed a claim, not that arbitrary AI output is true. Require the verification profile bound to the job and fail closed if verification fails.

Provider stake is economic assurance, not proof of model quality or confidentiality. Emergency/suspension authority must not confiscate or redirect valid earned entitlements.