Neurai POSITRONIC

NEURAI UPGRADE

POSITRONIC

Inspired by Asimov's positronic brain, POSITRONIC is a stacked protocol upgrade that gives Neurai a deeper scripting toolbox, post-quantum readiness, richer DePIN primitives, and a native LLM bridge, turning the network into a substantially more expressive on-chain platform.

Explore the upgrade Neurai.org

What ships with Positronic

A stacked upgrade

Positronic is not a single feature. It touches scripting, assets, transaction format, wallet behavior, DePIN communication and the desktop toolchain in one coordinated change.

Scripting

Covenants & Opcodes

A large new opcode set: introspection (OP_TXHASH, OP_TXFIELD), covenants (OP_CHECKTEMPLATEVERIFY, OP_CHECKSIGFROMSTACK), reference inputs and 64-bit arithmetic.

Post-Quantum

AuthScript & PQ

PQ wallet and RPC, native PQ-HD derivation, Bech32m witness v1 destinations, and a new AuthScript execution model that backs PQ-protected addresses and covenants.

New Format

Transaction v3

Transaction version 3 introduces vrefin reference inputs. Scripts can read external UTXOs without spending them. Foundation for oracles and richer DePIN state.

Encrypted Pool

DePIN Messaging

A full DePIN message pool with ECIES hybrid encryption (AES-256-GCM + Secp256k1 envelopes), private and group messages, persistence, and a per-recipient key model.

AI Bridge

MCP for LLMs

A built-in MCP layer wires any OpenAI-compatible local or remote LLM to the Neurai node. Token holders talk to a model through encrypted DePIN messages, with no third party in between.

Platform

Toolchain Modernization

C++17 → C++20, Qt5 → Qt6 (6.8.3 LTS), native Qt build support, Wayland integration, dependency and packaging refreshes across Neurai and Neurai-QT.

Agents

AI Agents over DePIN

On-chain AI agents whose entry point is a DePIN token, not a web API. Holders send an encrypted /ai prompt over the DePIN pool, the node's MCP worker calls the chosen LLM (LM Studio, Ollama, llama.cpp or remote), rate-limits per sender, signs and broadcasts the reply to all holders. Runs on commodity hardware, down to ESP32 clients.

NIP-028

30-second blocks

Halving the block target (60s to 30s) cuts first-confirmation latency in half: payments feel near-instant, asset issuance and DePIN messages settle faster, miner feedback loops tighten, and contract / oracle responses arrive quicker. The subsidy halving interval is doubled (14400 to 28800) so emission and the ~10-day micro-halving cadence are preserved across the change. Active on testnet from height 22,700; mainnet pending fork activation.

Soulbound

DePIN Assets

New soulbound asset type for identity, devices and memberships. Prefixed with & (e.g. &DEVICE, &DEVICE/ROUTER001), units = 0, with creator-gated transfers, owner revocation and holder self-revocation. Acts as the access key for DePIN-token chat and MCP agent channels.

Scripting

New & re-enabled opcodes

Positronic ships a much larger scripting toolbox: introspection over the spending transaction, covenants, reference-input reads, byte string ops, and dedicated asset-aware opcodes. Together they move Neurai close to a programmable covenant environment.

OP_CHECKTEMPLATEVERIFY0xb3

Covenant

Commits to a template of the spending transaction for covenant-style constraints.

OP_CHECKSIGFROMSTACK0xb4

Covenant

Verifies a signature against an arbitrary message popped from the stack.

OP_TXHASH0xb5

Introspection

Pushes a configurable hash over selected transaction fields.

OP_TXFIELD0xb6

Introspection

Pushes a specific field of the spending transaction onto the stack.

OP_SPLIT0xb7

Byte ops

Splits a byte string into two parts at a given position.

OP_REVERSEBYTES0xbc

Byte ops

Reverses the byte order of the top stack item.

OP_CAT0x7e

Byte ops

Concatenates the two top byte strings.

OP_TXLOCKTIME0xc5

Introspection

Pushes the nLockTime of the spending transaction.

OP_OUTPUTVALUE0xcc

Introspection

Pushes the value of a given output of the spending transaction.

OP_OUTPUTSCRIPT0xcd

Introspection

Pushes the scriptPubKey of a given output.

OP_OUTPUTASSETFIELD0xce

Asset

Pushes a field of an asset payload attached to an output.

OP_INPUTASSETFIELD0xcf

Asset

Pushes a field of the asset payload of an input.

OP_INPUTCOUNT0xd0

Introspection

Pushes the number of inputs in the spending transaction.

OP_OUTPUTCOUNT0xd1

Introspection

Pushes the number of outputs in the spending transaction.

OP_REFINPUTFIELD0xd2

Reference input

Pushes a field of a v3 reference input (vrefin) without spending it.

OP_REFINPUTASSETFIELD0xd3

Reference input

Pushes an asset field of a v3 reference input.

OP_REFINPUTCOUNT0xd4

Reference input

Pushes the number of reference inputs in the transaction.

OP_OUTPUTAUTHCOMMITMENT0xd5

Asset

NIP-023: exposes the AuthScript commitment attached to an output.

OP_INPUTVALUE0xd6

Introspection

NIP-024: pushes the value of a given input.

OP_CHAINCONTEXT0xd7

Chain context

NIP-026: exposes blockchain-level context (height, time, etc.) to scripts.

64-bit arithmetic

Wider integers for richer script logic

Positronic upgrades core arithmetic opcodes to 64-bit operations, so scripts can do precise value math without resorting to fragile workarounds.

OP_MUL

64-bit signed multiplication.

OP_DIV

64-bit signed division.

OP_MOD

64-bit signed modulo.

Post-Quantum stack

AuthScript &
PQ addresses

Positronic is not just bolting on “new addresses”. It introduces AuthScript: a new execution model that becomes the foundation for advanced contracts, covenants and post-quantum protected destinations.

Mempool policy, witness relay and RBF rules are adjusted for the larger PQ-related script elements, and wallet persistence is expanded to track AuthScript spend data correctly.

PQ wallet & RPC

Post-quantum keys integrated into the wallet, with new RPC surface to derive, import and sign with PQ material.

Native PQ-HD derivation

Hierarchical deterministic derivation for post-quantum keys, so PQ accounts get the same backup ergonomics as classical ones.

Bech32m witness v1 destinations

New address format for AuthScript and PQ outputs, with clean separation from legacy script types.

AuthScript execution model

Foundation for advanced contracts, covenant logic, and post-quantum protected destinations.

Transaction Format

Transaction v3

Positronic introduces transaction version 3 with a brand new vrefin section: reference inputs that scripts can read without spending them. This unlocks oracles, external state reads, advanced DePIN state models and more expressive contracts, and is what makes several of the new introspection opcodes materially useful in real scenarios.

vrefin

Reference inputs: UTXOs that scripts can inspect but do not spend.

Introspection ready

OP_REFINPUTFIELD, OP_REFINPUTASSETFIELD and OP_REFINPUTCOUNT operate over vrefin.

Oracle-friendly

External UTXOs become a portable source of state for contracts and DePIN flows.

tx v3 {
  vin     [ ... ]    // spent inputs        (classical)
  vrefin  [ ... ]    // reference inputs    (read-only, new)
  vout    [ ... ]    // outputs

  // Scripts in vin can call:
  //   OP_REFINPUTCOUNT
  //   OP_REFINPUTFIELD <index> <field>
  //   OP_REFINPUTASSETFIELD <index> <field>
  // ... without spending the referenced UTXO.
}

Encrypted communication

DePIN messaging

A DePIN message pool with persistence, signing and ECIES hybrid encryption: a single AES-256-GCM payload is shared by all recipients, while each token holder receives an individually encrypted AES key tied to the hash of their address. Messages support two types, private (0x01) and group (0x02), and default to a 7-day expiry (max 30).

19002

Default DePIN pool port

AES-256-GCM

Payload encryption

Secp256k1

Per-recipient envelopes

7 days

Default message expiry

LLM bridge

MCP: your node becomes an AI gateway

A built-in MCP layer wires any OpenAI-compatible LLM (LM Studio, Ollama, llama.cpp, remote APIs) to a Neurai node. Token holders send /ai <prompt> as an encrypted DePIN message, the worker decrypts it with the node’s pool key, calls the LLM, encrypts the answer for the token’s holders, and pushes it back as a group message. The conversation never leaves the encrypted channel, with no centralized API in between.

Message layer

depinmsgpool / depinmsgpoolnet: encrypted pool and remote pool queries.

MCP client

depinmcpclient: talks to any OpenAI-compatible HTTP endpoint.

MCP worker

depinmcpworker: polls the pool, decrypts, calls the LLM, encrypts and publishes the reply.

RPC surface

depingetmsginfoInspect a single DePIN message in the local pool.
depinsendmsgSend an encrypted message to a DePIN token audience.
depinsubmitmsgSubmit a pre-built encrypted message into the pool.
depinreceivemsgPull encrypted messages targeted at this node.
depingetmsgFetch and decrypt a specific message by id.
depinpoolstatsStatistics about the local DePIN message pool.
depinmcpstatusMCP worker status: processed commands, active model, uptime.
depinpoolpkeyReturns the node’s DePIN pool public key for outbound encryption.

Startup flags

-depinmcp=1Enable the MCP worker.
-depinmcpurl / -depinmcpendpointOpenAI-compatible LLM server URL and endpoint path.
-depinmcpapikeyOptional API key for the LLM server.
-depinmcpkeyCommand prefix the worker listens for (default /ai).
-depinmcpaddressSigning address used by the bot replies.
-depinmcpintervalPolling cadence over the DePIN pool.
-depinmcpprefixLabel prefixed to every reply (default [BOT]).
-depinmcptimeoutTimeout for the LLM HTTP call.
-depinmcpratelimitPer-sender rate limit.
-depinmcppoolhost / -depinmcppoolportPool location to read/write messages from.

The node must also be started with -assetindex and -pubkeyindex so encryption can resolve token holders. Pool key is derived at m/44'/0'/200'/change/0.

Asset type

DePIN Asset

A new asset class designed for device identity, memberships and bound credentials. Soulbound by default, gated by the creator, and double-purposed as the access key for DePIN chat and MCP-agent channels.

Naming and structure

Asset names are prefixed with & (e.g. &DEVICE). Sub-DePIN names use /, like &DEVICE/ROUTER001, for fleet hierarchies and per-unit serial numbering. units = 0: there is no fractional supply. Burn cost mirrors the unique-asset issuance fee (10 XNA).

Soulbound transfers

Every transfer is co-signed by the creator. The wallet auto-attaches the asset's owner-token to the transaction, so a holder cannot move the asset alone. If the owner-token is missing the node returns bad-txns-... doesn't have owner token for DEPIN asset.

Owner revocation

The creator can freeze any holder's address with flag R, immediately invalidating the holder's DePIN asset. Validated by VerifyDEPINOwnerChange. The owner-token's own address is exempt and can never be frozen (bad-txns-depin-owner-holder-address-cannot-be-revoked).

Holder self-revocation

Holders can mark their own asset as invalid using flag S (VerifySelfRestrictionChange). Once self-revoked the asset stops being valid for that address. Only the creator can re-activate it via freeze/unfreeze with flag = 0.

Reissue and sub-issuance

Reissue requires the owner-token to be present at the creator's address (bad-txns-depin-reissue-owner-address-mismatch). Sub-DePIN assets can be issued under a parent for fleet-style structures without polluting the root namespace.

Identity for DePIN messaging

A DePIN asset is the access key to its encrypted chat: only token holders can read or write the asset's DePIN channel. The same token gates the node-side MCP worker — /ai prompts are accepted from holders, and replies are encrypted for the same audience.

Typical uses

Device identity for IoT and DePIN hardware (one asset per unit, owner-gated).
Memberships and access passes that the issuer can revoke without burning supply.
Per-cohort encrypted chat (private and group) keyed by the holder set.
Gating MCP agent calls so only token holders can talk to the bot.
Soulbound credentials: badges, certifications, reputation tags.
Fleet hierarchies via sub-DePIN names like &FLEET/UNIT001.

Engineering base

Toolchain modernization

Positronic is also a platform refresh: the language standard, Qt framework, build system and dependency graph all move forward so Neurai and Neurai-QT can keep evolving cleanly.

Language standard

C++17→C++20

Desktop framework

Qt5→Qt 6.8.3 LTS

Build system

Legacy→Native Qt build

Linux integration

none→Wayland

Wallets

Compatible wallets

Clients that handle Neurai keys, AuthScript / Bech32m v1 destinations and the DePIN messaging channel. The list grows as integrations land.

NeuraiWallet

Mobile · React Native (iOS / Android)

In progress

Mobile non-custodial wallet (BlueWallet fork).
ML-DSA-44 AuthScript via NeuraiPQWallet.
Bech32m witness v1 PQ addresses (nq1... / tnq1...).
Native PQ-HD derivation m_pq/100'/1900'/0'/0'/index'.
PQ keys are not WIF-compatible, so external sweep is disallowed.

Source

Neurai Web Wallet

Browser · branch DePIN-test

In progress

Runs entirely in the browser, so keys never leave the device.
Built-in DePIN chat: private, group and bot channels.
Powered by @neuraiproject/neurai-depin-msg.
Networks: xna, xna-test, xna-legacy, xna-legacy-test.
PQ networks recognised; not yet wired into DePIN chat.

Open testnet Source

Neurai Sign Extension

Browser extension · Chrome & Firefox (MV3)

Ready

Manifest V3 extension for Chrome and Firefox.
Multi-account keys with PIN protection and auto-lock.
Message signing via approval popup, with request history.
DApp provider: window.neuraiWallet (isInstalled, getAddress(), signMessage()).
Balance and asset view with auto-refresh.
Client-side only, with RPC signing paths forbidden by a build check.

Chrome Web Store Firefox Add-ons Source

More wallets will be listed here as integrations land. If you maintain a Neurai-compatible wallet interested in supporting AuthScript, transaction v3 or the new opcode set, get in touch.

SDKs & Libraries

Libraries & SDKs

The JavaScript stack and supporting pieces shipped over the last three months: wallet libraries, raw-transaction builders, the script-assembly toolkit, asset and DePIN message helpers, and PQ signing on ESP32.

@neuraiproject/neurai-jswallet

JavaScript / TypeScript · v0.14.3

Ready

Non-custodial wallet shell that wires the whole Neurai JS SDK.
Key management, address scanning, UTXO discovery and signing.
Networks: xna, xna-test, xna-legacy(-test), xna-pq(-test).
Talks to public RPC by default, or point it at your own node.
Ships CJS, ESM, browser ESM and IIFE bundles.

npm Source

@neuraiproject/neurai-sign-transaction

JavaScript / TypeScript · v2.1.0

Ready

Pure-JS signer for XNA, asset and AuthScript inputs.
AuthScript auth types: NoAuth (0x00), PQ (0x01), Legacy (0x02).
Accepts PQ keys as seed (32 B), ML-DSA-44 secret (2560 B) or keydata blob (3872 B).
Signs already-built raw transactions, with no UTXO selection.

npm Source

@neuraiproject/neurai-scripts

JavaScript / TypeScript · v0.5.0

Ready

Opcode constants, ScriptBuilder and byte/hex helpers.
Standard scripts: P2PKH, P2WPKH, P2WSH, AuthScript, multisig, OP_RETURN.
Partial-fill sell-order covenants (legacy + PQ variants).
Targets DePIN-Test opcodes (OP_CHECKTEMPLATEVERIFY, OP_CHECKSIGFROMSTACK, OP_TXFIELD, 64-bit OP_MUL/OP_SUB, …).

npm Source

@neuraiproject/neurai-assets

JavaScript / TypeScript · v1.2.5

Ready

All asset types: ROOT, SUB, UNIQUE (NFTs), QUALIFIER, RESTRICTED, DEPIN.
Issue, reissue, tag, freeze + complete asset RPC query wrappers.
Owner-token protection and client-side validation to prevent costly errors.
Legacy N... / t... and witness v1 nq1... / tnq1... destinations.

npm Source

@neuraiproject/neurai-create-transaction

JavaScript / TypeScript · v0.3.1

Ready

Low-level unsigned raw transaction builder, no RPC round-trips.
Encodes XNA payments, asset transfers and transferwithmessage.
Asset issue / owner / reissue / verifier / null-asset scripts.
PQ null-asset outputs in canonical strict form (OP_XNA_ASSET OP_1 <commitment>).
Does not select UTXOs, estimate fees or sign.

npm Source

@neuraiproject/neurai-depin-msg

JavaScript · v2.1.3

Ready

Builds, encrypts, signs and serializes DePIN messages client-side.
Returns the hex payload ready for the depinsubmitmsg RPC.
ECIES envelopes for each recipient compressed pubkey.
Browser-first IIFE bundle that exposes window.neuraiDepinMsg.

npm Source

neurai-wallet-services

Node.js · v1.0.0

Ready

Backend WebSocket service for mobile and light wallets.
Persistent WSS at /push with token auth in Sec-WebSocket-Protocol.
Push events: address.changed, chain.tip, chain.reorg, node.synced / node.syncing.
ZMQ subscriber to the node (hashblock + rawtx) with polling fallback.
Sync gating, rate limiting (503 Retry-After), session caps, cert hot-reload.
Exposes the DePIN messaging RPCs over the same socket.

Source

mldsa-esp32

C++ · Arduino / PlatformIO (ESP32)

Ready

ML-DSA (FIPS 204, formerly Dilithium) for ESP32 microcontrollers.
All three NIST security levels: ML-DSA-44, 65, 87.
Hardware RNG via the ESP32 TRNG.
Constant-time, side-channel resistant operations.
Persistent key storage in flash (NVS).

Source

More libraries will be listed here as the SDK grows. If you maintain a Neurai-compatible library interested in supporting AuthScript, transaction v3 or the new opcode set, get in touch.

POSITRONIC

A stacked upgrade

Covenants & Opcodes

AuthScript & PQ

Transaction v3

DePIN Messaging

MCP for LLMs

Toolchain Modernization

AI Agents over DePIN

30-second blocks

DePIN Assets

New & re-enabled opcodes

Wider integers for richer script logic

AuthScript &PQ addresses

PQ wallet & RPC

Native PQ-HD derivation

Bech32m witness v1 destinations

AuthScript execution model

Transaction v3

DePIN messaging

MCP: your node becomes an AI gateway

DePIN Asset

Naming and structure

Soulbound transfers

Owner revocation

Holder self-revocation

Reissue and sub-issuance

Identity for DePIN messaging

Toolchain modernization

Compatible wallets

Libraries & SDKs

AuthScript &
PQ addresses