Subnet Legibility Index · snapshot 2026-09-09 · rubric v1.0 Exploit Summit 2026 · Montreal ·

SN 90. Rank 29 of 32 by emission

KubeTEE

1.1% of emission2 miners · 6 validatorsregistration 0.0005 TAOverified 2026-09-09

KubeTEE is the AI Factory of the Bittensor network. It turns decentralized GPU clusters into a confidential factory for state-of-the-art AI services.

In their own words · kubetee.ai
Explained from zero · compute · written 2026-09-10

SN90 KubeTEE rents out GPU factory floors whose workrooms are sealed so that even the landlord cannot look inside, paying the owners of those rooms a dollar-denominated hourly rate in the subnet's token.

The commodity, explained from zero

The commodity is confidential compute: hours on high-end GPUs, the processors that run AI, inside a trusted execution environment, a sealed compartment in the chip that proves what code ran and hides the memory even from the machine's owner. The front page calls it "An AI factory, run where no one can read your data."

It has a price because some buyers, the site says regulated and enterprise workloads, cannot put their data on an ordinary rented server where the operator could read it. The validator dashboard carries a price card in dollars per GPU hour, from $2.00 for an RTX 6000 to $9.75 for a B300.

Who buys today: not an enterprise, yet. The revenue dashboard is explicit: "KubeTEE serves inference on sayGM (Bittensor SN28). The alpha earned is swapped to SN90 and recycled." The factory's spare hours are sold through another subnet's reseller market, and the README says that channel gets only idle capacity. Here the comparison breaks: a landlord collects rent from tenants, but this landlord's only recorded income is from subletting empty rooms to a neighbour.

Why it is on Bittensor at all

The stated reason is paying for the factory by consumption: buyers spend the subnet's token to use it, spent tokens return to the unissued supply and are re-emitted, and emission, the subnet's share of newly minted TAO, is split 41 percent to miners, 41 to validators, 18 to the owner. The tokenomics document names one measure of whether it is working: the subsidy ratio, emission value over miner pay, "must be monotonically down." Cost against a conventional cloud is not compared.

How the work gets done

Miners provide a Kubernetes cluster, software that runs many containers across machines, of eight nodes with data-center GPUs, post a 100 TAO deposit that is held but not slashed, and, today, are onboarded by hand; the README says "KubeTEE onboards each miner today" and that self-service comes in Phase 1. Validators check a readiness gate and convert a dollar target into weight: usd_target_per_hour times tenure times window hours, divided by dollars per alpha, with outside price feeds as a hard dependency; if a feed fails, the cycle skips. The README's own table says TEE attestation, job metrics, and serving probes are "designed / to be built" and "not yet in the weight path."

How you would know it works

Two dated dashboards: revenue at https://kubetee.ai/dashboard ("Total recycled $10k since Aug 23," refreshed September 9, with swap extrinsics) and validator payouts at https://s3.hippius.com/kubetee-validator/index.html, timestamped 2026-09-10, showing a $2,338 epoch pool. The gateway at https://llm.kubetee.ai is a live Swagger page.

What is missing

There is no pricing page; the only prices are the validator's GPU-hour card and sayGM token rates, and USDC and TAO billing are listed as coming. The on-chain contact pierre@kubetee.ai appears nowhere on the site; the README gives a first name and an X handle. Miners cannot join without the operator, and there is no runnable miner guide. Support is Discord, with no status page or SLA.

Go deeper

  • Front door with What is KubeTEE: https://kubetee.ai
  • README with What Ships Today: https://raw.githubusercontent.com/KubeTEE-AI/kubetee-subnet/main/README.md
  • Tokenomics: recycling and the split: https://raw.githubusercontent.com/KubeTEE-AI/kubetee-subnet/main/docs/TOKENOMICS.md
Sources for this explainer

Metaphor: a factory whose workrooms are sealed so even the landlord cannot look in. Every claim is drawn from the evidence set or the subnet's own materials; "(inferred)" marks a conclusion rather than a quote. Corrections.

How we scored it

Four audiences, four questions each, scored on what a first-time reader can find in five minutes. Method in the rubric.

On-chain identity 7/7
subnet_name
KubeTEE
github_repo
github.com
subnet_contact
pierre@kubetee.ai
subnet_url
kubetee.ai
discord
discord.gg
description
KubeTEE AI Factory: Confidential Computing TEE Multi-Cluster K8s
additional
x.com

Stakers and validators 4.3

Should I allocate here? · rank 1 of 32 for this audience

Q1What it is 4

KubeTEE is the AI Factory of the Bittensor network. It turns decentralized GPU clusters into a confidential factory for state-of-the-art AI services

kubetee.aiverifiedlive

GPU hour prices sit one click away

Q2Who it is for 5

Total recycled $10k since Aug 23

kubetee.aiverifiedlive

with dated swaps and extrinsic ids, data refreshed September 9, revenue comes from the owner miner serving inference on sayGM

Q3How it resists gaming or fails 4

Validator Scoring section with a What Ships Today table separating live from designed, feed failure contracts, attestation not yet in the weight path, an 86 KB README that needs expertise

Q4Identity and documentation 4

identity 7 of 7, github, url and discord resolve, Tokenomics document covers recycling, owner conviction and the 41 41 18 split, contact pierre@kubetee.ai not on the site

Miners 3.3

Can I compete, and what wins? · rank 18 of 32 for this audience

Q1What it is 3

KubeTEE onboards each miner today

miners provide an attested TEE cluster for inference and Armada jobs, onboarding procedures intentionally unpublished, permissionless onboarding is a Phase 1 item

Q2Who it is for 4

NVIDIA H100

"H200" "B200" "B300" and RTX PRO 6000 Server on Intel TDX Xeon, 8 nodes per cluster, a 100 TAO deposit, USD price card sets competitiveness, registration cost not stated

Q3How it resists gaming or fails 4
s3.hippius.comverifiedlive

readiness gate then usd_target_per_hour times tenure times window hours over usd per alpha, dashboard shows one miner at $454 per hour and 25.4 percent of the pool, guarded deregistration on absence

Q4Identity and documentation 2

no runnable miner guide, the README says onboarding procedures are not published, semantic versioning defined for the validator image, repo pushed 2026-09-04, no GitHub releases

Buyers and enterprises 2.8

Can I use this today? · rank 16 of 32 for this audience

Q1What it is 4

LiteLLM API - Swagger UI

llm.kubetee.aiverifiedlive

live OpenAI compatible gateway, front page says confidential inference for GLM-5.2, GLM-5.3 and Ornith-1.5-397B is available through sayGM, no sign up path or example

Q2Who it is for 3

Enterprise-Grade

kubetee.aiverifiedlive

and regulated workloads named, prices exist only as a per GPU hour card on the validator dashboard and as sayGM token prices, USDC and TAO billing listed as coming, no pricing page

Q3How it resists gaming or fails 2

support is a Discord server with a warning that the team never DMs first, no status page, no SLA, the README calls a consumer aligned validator the protocol native SLA

Q4Identity and documentation 2
llm.kubetee.aiverifiedlive

Swagger UI on the gateway is the only API reference, the chain contact pierre@kubetee.ai appears nowhere on the site, the README gives a first name and an X handle

Newcomers 3.5

What is this and why does it matter? · rank 15 of 32 for this audience

Q1What it is 4

An AI factory, run where no one can read your data

kubetee.aiverifiedlive

with a What is KubeTEE section that explains the host cannot read workload memory, consistent with the chain description

Q2Who it is for 3

Every service runs inside a hardware-secured Trusted Execution Environment: the host cannot read workload memory

kubetee.aiverifiedlive

privacy stated as the difference, no comparison with a centralized cloud

Q3How it resists gaming or fails 4
s3.hippius.comverifiedlive

validator dashboard timestamped 2026-09-10 with epoch payouts, a revenue dashboard with dated swaps, a live Swagger endpoint, no benchmark of the AI services themselves

Q4Identity and documentation 3
kubetee.aiverifiedlive

subnet_name matches the site, url resolves, the What is KubeTEE section serves as an about page, the description is a tag string of product terms, not a sentence

Provenance

How this score came to be. Verified means the scorer fetched the page and the words are on it; inferred means concluded from code, absence, or a third party. The link badge is a separate automated check made before publication.

scored by agent a 2026-09-09, rubric v1.0merged 2026-09-09links verified 2026-09-09: 33 live, 0 unreachable, 2 manual

Something wrong? Corrections of fact are applied as they arrive during the window; score disputes are batched at its close. How to file one · GitHub issue · email.