Search papers, labs, and topics across Lattice.
To prevent data leakage from commercial ML training streams delivered to inactive consumers, Attestream couples intermittent data delivery with verifiable, on-chain reporting of downstream model creation. The architecture implements lazy-evaluated usage gates via Solidity smart contracts and EIP-712 dual-signed records to suspend non-reporting consumers without incurring dedicated monitoring transaction overhead. Across a 50-consumer pool, the system operates at roughly $0.13 per lifecycle cycle on rollups while its modality-pluggable fingerprinting achieves 100% leak attribution from just 40 tabular rows, JPEG quality-30 compression, or text with 30% paraphrase rates.
Data providers no longer have to feed continuous ML training streams on blind trust: dormant consumers are automatically cut off, and any data leak can be cryptographically traced back to the exact recipient using as few as 40 tabular rows.
Providers of continuously produced, commercially valuable data -- sensor streams, telemetry, and other feeds sold as machine-learning training material -- cannot observe whether delivered data is actually used, while data that keeps flowing to inactive consumers enlarges the leakage surface without producing value. We present Attestream, a blockchain-based architecture for intermittently delivered dataset streams that couples continued delivery to verifiable usage reporting. Every lifecycle event -- dataset preparation, dual-signed delivery, derivative creation (e.g., a model), and derivative distribution -- is appended to an on-chain registry as a non-repudiable, mutually linked lifecycle record. The mechanism requires provable transfer, not tokenization: plain contract storage, ERC-721 tokens, and anchored off-chain receipts are interchangeable representations of the same protocol. A usage-aware gate suspends a consumer's stream when no derivative-creation record is registered within a reporting window; evaluated lazily inside the next delivery transaction, monitoring adds no dedicated transactions. A modality-pluggable fingerprinting layer binds any leaked copy to the dual-signed delivery record of the responsible consumer, instantiated for tabular/geospatial records, images, and documents. We implement the registry as a Solidity contract with EIP-712 dual signatures and evaluate it: a full lifecycle round costs 657k gas with plain records ($0.13 on rollups; ERC-721 tokenization adds ~30k gas per record), and over a 50-consumer pool leak attribution reaches 100% from 40 leaked table rows under moderate noise, survives JPEG recompression to quality 30, and tolerates paraphrase rates up to 30% for documents.
