Bittensor’s decentralized AI network is building a confidential routing layer that could reshape how AI inference gets priced, delivered, and verified. The integration centers on Subnet 28, internally called “gm,” which uses Trusted Execution Environments to let miners compete on routing costs, payments, and model access, all while keeping user queries private.
What Bittensor is actually building
Subnet 28 introduces a privacy-first marketplace for AI inference. Trusted Execution Environments, or TEEs, are hardware-level secure enclaves that process data without exposing it to the machine’s operator. Even the miners running your AI queries can’t see what you’re asking.
The system generates verifiable attestations, cryptographic proof that your request was handled inside a secure enclave without tampering. Miners on the subnet compete not just on speed or quality but on routing costs and payment terms, creating a dynamic pricing layer that sits on top of Bittensor’s existing subnet economy.
Development discussions around this confidential routing integration took place between May 28 and 29, 2026. The architecture has been explicitly compared to “OpenRouter or Venice AI, but on Bittensor,” suggesting the team sees centralized inference aggregators as the competitive benchmark to beat.
The numbers behind the integration
Bittensor’s Chutes subnet, designated SN64, processes between 100 billion and 120 billion tokens per day. Between 20% and 25% of that traffic routes through OpenRouter, making Chutes one of the platform’s top inference providers. Multiple other Bittensor subnets, including Targon and Nineteen, are also operational on OpenRouter, enabling decentralized inference through standard API access.
OpenRouter itself just raised $113 million in May 2026, led by CapitalG, Google’s independent growth fund. That round valued the company at $1.3 billion, reflecting surging enterprise demand for unified multi-model routing.
Users accessing Bittensor-powered models through OpenRouter don’t need to own TAO tokens. They interact through OpenAI-compatible APIs, the same interface developers already use for GPT models.
Why confidential routing matters
TEE-based confidential routing produces hardware-backed proof that data was processed securely, rather than relying on a provider’s privacy policy. For Bittensor’s subnet economy, this creates a new competitive dimension where miners compete on privacy guarantees, routing efficiency, and payment flexibility simultaneously.
What this means for investors
OpenRouter’s $1.3 billion valuation signals that enterprise customers are willing to pay for multi-model routing. Bittensor subnets competing within that marketplace as top providers demonstrates decentralized inference is commercially competitive.
For the TAO token, the OpenRouter integration means adoption can scale through traditional API channels while the token captures value at the infrastructure layer through staking, registration, and validator incentives, even though end users don’t need to hold the token.
Bittensor needs to demonstrate that TEE-based confidential routing can maintain the throughput levels its subnets already achieve. Adding encryption and attestation to every query introduces computational overhead. Whether miners can absorb that cost while remaining price-competitive with centralized alternatives will determine how quickly this architecture gains traction.