A widely-used AI model just got banned
The model still works on someone's servers somewhere, it just does not work for the rest of us anymore
The decision was made by a small group of people in a room you were not in
This is not a critique of any specific organisation, it is the structural property every centrally-hosted AI service shares
The model lives on someone's server, the API key is issued by someone, the terms of service can change, the legal opinion can shift, the weights can be silently swapped between yesterday and today
The crypto industry has talked about "decentralised AI" for two years, every project that has claimed the label has meant one of four things:
- The model lives on Hugging Face, the centralised server just changed name
- The inference runs in a TEE, the trust assumption is the chip manufacturer
- The output is bridged via an oracle, the trust assumption is the relay operator
- The onchain part is a Merkle root of work done off-chain, the chain knows nothing about whether the inference respected its own rules
None of these survive contact with a ban
Quill does not check any of those four boxes, the model's weights are bytecode at a contract address on Base mainnet, the forward pass is integer arithmetic the EVM verifies natively, every output is a function call any node in the world can re-execute and arrive at the same bytes, there is no off-chain step, there is no relay, there is no admin key, there is no team that can decide tomorrow to swap the model
The model that was banned this week could not have been banned the same way if it had lived where Quill's models live. Not because regulators or hosts decided to leave it alone, but because there is no party with the keys to turn it off
This is the property "decentralised AI" was always supposed to mean, and that almost nobody has actually built, Quill has and is
Live engine, live model, live receipts on Base mainnet, anyone with an RPC connection can verify every claim in this post from chain state
The work for us from here is to make the models good enough that the property matters at scale, the infrastructure already does, and there is no admin in the path to take it away