How it works
toda is a private, decentralized memory network for AI. It gives user context a single place to be written, a market that decides what is worth keeping, and an onchain record that fixes ownership without exposing content. The sections below follow one record from the moment it is captured to the point where it belongs to a wallet.
Capture
Context is produced everywhere and retained almost nowhere. A model learns your preferences in one session and forgets them by the next. An agent reaches a conclusion the next agent has no way to see. Each application keeps what it observes about you inside its own walls.
toda collapses those walls into a single write path. The browser extension, the SDK, and the HTTP API send to the same endpoint, so a conversation, a decision, a stated preference, or a recorded fact enters the same pipeline regardless of where it originated. At this stage a submission is a claim, not yet memory.
Validate
Most captured activity has no lasting value. Duplicates, filler, and content engineered to corrupt a model arrive alongside the small share that carries durable signal. Separating the two is the hard problem, and it is where the network earns its position.
An extraction layer reads each incoming sequence and judges whether it holds something worth carrying forward: a firm decision, a stable preference, a fact with a reason to persist. What makes that judgment credible rather than arbitrary is the capital attached to it. $TODA staked against a sequence is what commissions the evaluation, and the pass returns a verdict. Submissions that fail are rejected before they become memory.
Staking prices the right to be evaluated. It makes noise expensive and signal cheap, which is the only durable defense against a network being flooded into uselessness. A stake expresses conviction that a record deserves to persist. It does not certify that a claim is true.
Store
Content is held offchain, encrypted under keys tied to the owner's wallet. This holds for every record, private or shared, without exception. None of the content is written to the chain.
Records that fail validation are not kept. They stay offchain and are pruned, so the network carries the weight of what passed rather than the weight of everything ever submitted. The asymmetry compounds. The useful set grows while the discarded set disappears.
Own
For each record that survives, toda writes a cryptographic commitment to Solana. The commitment is a fingerprint of the content, not the content itself. It is enough to prove that a specific memory is yours and has not been altered since it was recorded, and it discloses nothing about what the memory contains.
From that point the record answers to a wallet rather than to the product that captured it. Ownership, permission, and stake settle onchain. The owner holds the keys that gate access and decides what stays private and what can be read, shared, or exchanged.
Why the split matters
The design separates two things that are usually conflated: the content of a memory and the proof of it. Content stays private and encrypted. Proof is public and verifiable. Anyone can confirm that a memory is authentic and unaltered by checking its commitment onchain, and only the owner, along with the parties the owner authorizes, can read what it says.
That separation is what lets private data take part in an open market without being surrendered to it. It is the difference between a network that stores your memory and one that lets you own it.
Next: Why toda.