{ "schema_version": "1.1.0", "generated_at": "2026-09-03T05:50:46Z", "generator": "scripts/generate_canon_registry.py", "regeneration": "Run npm run production-manifest inside hive-verifier-api against the live host, then re run this generator and scripts/build_canon_explorer.py. Deployment state always comes from the manifest, never from this file by hand.", "sources": { "production_manifest": { "path": "hive-verifier-api/PRODUCTION_MANIFEST.json", "generated_at": "2026-09-03T05:38:21.652Z", "production_url": "https://thehiveryiq.com/v1", "repository_commit": "3dd90bd719f2f3b3370687e534ac7e8df280880a", "production_check": { "reachable": true, "checked_at": "2026-09-03T05:38:20.424Z", "note": null } }, "honesty_contracts": { "path": "hive-verifier-api/src/typed/honesty-contracts-registry.js", "public_contracts": 33, "internal_only_contracts": 1 }, "benchmarks": { "path": "hive-verifier-api/benchmarks/results-latest.json", "generated_at": "2026-08-16T02:19:11.262Z", "git_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2" }, "overlay": { "path": "scripts/canon_registry_overlay.json" }, "audits": [ "canon-source-of-truth-reconciliation.md", "canon-repository-live-service-audit.md", "canon-rebuild-completion-report.md" ] }, "honesty_rules": [ "Historical deployment reports cannot establish current acceptance. No current endpoint acceptance is asserted by this registry.", "A benchmark is only carried when the entry is deployed. Local numbers for undeployed code are withheld.", "Only typed_receipt_contract entries count as receipt contracts. Services, composites, glossaries and filing gated work are listed and never counted.", "Anchors are permanent. Renames are added as aliases so existing links keep resolving.", "A use case mapping documents how an integration binds to primitives that already exist. It never counts as a primitive and never creates one." ], "categories": [ { "id": "typed_receipt_contract", "label": "Typed receipt contract", "definition": "A canonical receipt type in the unified typed receipts service, with its own JSON Schema, a token gated mint route, an open verify route and its own tests. These are the only entries that count as receipt contracts.", "counts_as_contract": true }, { "id": "external_operational_service", "label": "External service or reference implementation", "definition": "A separately recorded service outside the typed receipts codebase, or an offline reference implementation in this repository. Not part of the typed contract count, because its source and deployment live elsewhere.", "counts_as_contract": false }, { "id": "product_composite_system", "label": "Product or composite system", "definition": "A suite, wrapper, dashboard, visualization or glossary layered over other entries. No endpoint and no receipt type of its own. Never counted.", "counts_as_contract": false }, { "id": "filing_gated_private", "label": "Filing gated private work", "definition": "Work that exists privately and is deliberately not disclosed publicly until a provisional filing is confirmed. Named here only so the count cannot drift. No schema, no routes, no example, no benchmark.", "counts_as_contract": false } ], "states": { "production_deployed": { "label": "Production deployment reported", "operational": false, "recorded_operational": true, "definition": "PRODUCTION_MANIFEST.json reports deployed true and production_ready_for_canon true for this type, from a live probe of the production URL. This historical report is not current operational acceptance." }, "code_complete_not_deployed": { "label": "Code complete, not deployed", "operational": false, "definition": "Implemented, unit tested, smoke tested and documented in this repository, but the manifest does not report it as deployed. Never describe it as live." }, "external_service_live_probed": { "label": "External service, historical response recorded", "operational": false, "recorded_operational": true, "definition": "A host outside this codebase answered a non mutating probe in a recorded audit session. That response alone does not establish signature acceptance or durable operation." }, "external_service_claimed_not_reprobed": { "label": "External service, claimed, not re probed", "operational": false, "definition": "A live claim rests on an earlier audit and no current pass reached the host. Re probe before depending on it." }, "external_service_hosted_endpoints_down": { "label": "External service, hosted endpoints mostly down", "operational": false, "definition": "Local tests pass but the documented hosted endpoints did not answer. Call the underlying primitive directly." }, "offline_reference_implementation": { "label": "Offline reference implementation", "operational": false, "definition": "Runnable code with no hosted route. Verifiable locally, not a service." }, "composite_no_independent_endpoint": { "label": "Composite, no endpoint of its own", "operational": false, "definition": "A wrapper over other entries. No route, no schema, no receipt type." }, "visualization_only": { "label": "Visualization only", "operational": false, "definition": "A drawing of other primitives' receipts. Issues nothing." }, "concept_extension_only": { "label": "Concept extension only", "operational": false, "definition": "A proposed extension of another entry. No code, schema or endpoint." }, "glossary_only": { "label": "Glossary only", "operational": false, "definition": "Definitional content. Not a primitive." }, "filing_gated_private": { "label": "Filing gated, private", "operational": false, "definition": "Deliberately undisclosed until a provisional filing is confirmed. Listed by name only." } }, "counts": { "typed_receipt_contract": 105, "external_operational_service": 16, "product_composite_system": 13, "filing_gated_private": 0, "total_entries": 134, "typed_contracts_deployed": 104, "typed_contracts_code_complete_not_deployed": 1, "entries_with_partner_cross_links": 106, "use_case_mappings": 3 }, "partner_index": { "aiuc-proof": { "label": "AIUC proof surface", "url": "/partners/aiuc-proof/", "anchors": [ "afir-s3", "analysis-replay", "authority-carriage", "authority-qualification", "bpa-attestation", "canon-tiers", "causal-path", "conduct-record", "corpus-commitment", "disclosure-free-replay", "effect-quiescence", "egress-bond", "eval-administration", "evar", "fault-attribution", "forensic-rail", "howler-sae", "imprimatur", "parametric-trigger", "pbs", "portfolio-exposure", "proof-credit", "r3pv", "recovery-determination", "refusal-ledger", "sigr-chain", "sigr-gca", "submission-attestation", "typed-signer", "xcalibur" ] }, "amex": { "label": "American Express use case", "url": "/amex/", "anchors": [ "authorization-decision", "conduct-record", "fault-attribution", "intent-affirmation", "intent-verifiability", "recovery-determination" ] }, "armilla": { "label": "Armilla use case", "url": "/partners/armilla/", "anchors": [ "causal-path", "effect-quiescence", "eval-administration", "fault-attribution", "mandate-conformance", "parametric-trigger", "portfolio-exposure", "recovery-determination", "submission-attestation" ] }, "bitgo": { "label": "BitGo use case", "url": "/bitgo/", "anchors": [ "authorization-decision", "canon-tiers", "mandate-aggregate", "mandate-conformance" ] }, "cartesia-proof": { "label": "Cartesia proof surface", "url": "/partners/cartesia-proof/", "anchors": [ "afir-stream", "foretoken", "media-origin-receipt", "royalty-provenance" ] }, "cerebras-canon-matching": { "label": "Cerebras canon matching", "url": "/partners/cerebras-canon-matching/", "anchors": [ "bpa-attestation", "foretoken", "multi-source-divergence", "stipryn" ] }, "cerebras-proof": { "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/", "anchors": [ "afir", "assembly-receipt", "bpa-attestation", "bpa-budget", "corpus-commitment", "eval-administration", "evar", "foretoken", "howler-sae", "multi-source-divergence", "s2s", "sigr-bill", "sigr-cachesign", "sigr-chain", "sigr-consensus", "sigr-gca", "sigr-manifest", "sigr-mir", "stipryn", "typed-signer" ] }, "cerebras-technical-companion": { "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/", "anchors": [ "afir-stream", "foretoken", "s2s", "sigr-cachesign", "sigr-manifest", "stipryn" ] }, "chime-proof": { "label": "Chime proof surface", "url": "/partners/chime-proof/", "anchors": [ "authority-delegation", "disclosure-free-replay", "diurnal-bond", "erasure-receipt", "hive-ledger", "hive-receipt", "mandate-aggregate", "mandate-conformance", "proof-credit", "proof-pre-fill", "protected-flow", "shod", "sigr-gitm" ] }, "circle": { "label": "Circle proof surface", "url": "/partners/circle/", "anchors": [ "authority-delegation", "authority-qualification", "canon-tiers", "carnac", "carnac-gateway", "delegation-attenuation", "effect-closure", "hahs", "hive-ledger", "hive-passport", "hive-receipt", "hivebound-envelope", "imprimatur", "inkframe-non-mutation", "inkframe-v1", "ledger-parity", "mandate-aggregate", "mandate-conformance", "mandate-crossacceptor", "multi-source-divergence", "perimeter-bond", "proof-pre-fill", "proof-transition", "proof-transition-portable", "protected-flow", "r3pv", "royalty-provenance", "screening-attestation", "settlement-feed", "shod", "sigr-bill", "smsh", "spectralzk", "stipryn", "viewkey" ] }, "cisco": { "label": "Cisco use case", "url": "/cisco/", "anchors": [ "admission-binding", "analysis-replay", "authority-carriage", "authority-delegation", "authority-qualification", "authority-revocation", "canon-tiers", "carnac", "carnac-gateway", "carnac-governance", "delegation-attenuation", "disclosure-free-replay", "diurnal-bond", "effect-quiescence", "egress-bond", "forensic-rail", "hive-passport", "hiveseal-qpuf", "imprimatur", "knowledge-timestamp", "mcp-relay-layer", "pbs", "perimeter-bond", "protected-flow", "protected-flow-fleets-composite", "refusal-ledger", "sigr-chain", "sigr-gitm", "smsh", "spectralzk", "submission-attestation", "viewkey" ] }, "cloudflare": { "label": "Cloudflare proof surface", "url": "/partners/cloudflare/", "anchors": [ "bpa-attestation", "bpa-budget", "carnac", "carnac-gateway", "directory-state", "egress-bond", "forensic-rail", "perimeter-bond", "routing-receipt", "sigr-bond", "sigr-cachesign", "sigr-gitm" ] }, "deccan-quality-proof": { "label": "Deccan quality proof", "url": "/partners/deccan-quality-proof/", "anchors": [ "corpus-commitment", "eval-administration", "evar", "originproof" ] }, "draftkings-proof": { "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/", "anchors": [ "knowledge-timestamp", "multi-source-divergence", "pbs", "screening-attestation", "settlement-feed" ] }, "equinix": { "label": "Equinix use case", "url": "/equinix/", "anchors": [ "canon-tiers", "delegation-attenuation", "effect-quiescence", "knowledge-timestamp", "mandate-crossacceptor", "meter-witness" ] }, "fanatics-proof": { "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/", "anchors": [ "knowledge-timestamp", "media-origin-receipt", "morso", "pbs", "royalty-provenance", "screening-attestation", "settlement-feed" ] }, "fanduel-proof": { "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/", "anchors": [ "effect-closure", "multi-source-divergence", "pbs", "screening-attestation", "settlement-feed" ] }, "fanduel-provable-play": { "label": "FanDuel provable play", "url": "/partners/fanduel-provable-play/", "anchors": [ "settlement-feed" ] }, "fireblocks": { "label": "Fireblocks use case", "url": "/partners/fireblocks/", "anchors": [ "authority-carriage", "authority-qualification", "authority-revocation", "authorization-decision", "delegation-attenuation", "effect-quiescence", "fault-attribution", "ledger-parity", "mandate-conformance" ] }, "fireworks": { "label": "Fireworks", "url": "/partners/fireworks/", "anchors": [ "afir", "afir-s3", "assembly-receipt", "bpa-attestation", "bpa-budget", "cache-epoch", "entropy-custody", "evar", "foretoken", "hivebound-envelope", "numeric-lineage", "routing-receipt", "s2s", "sigr-bill", "sigr-bond", "sigr-cachesign", "sigr-chain", "sigr-consensus", "sigr-gca", "sigr-manifest", "sigr-mir", "stipryn" ] }, "fish-proof": { "label": "Fish Audio proof surface", "url": "/partners/fish-proof/", "anchors": [ "afir-stream", "capability-exercise", "capture-commitment", "foretoken", "media-origin-receipt", "morso", "royalty-provenance", "transparency-checkpoint" ] }, "forter": { "label": "Forter use case", "url": "/partners/forter/", "anchors": [ "authority-carriage", "authority-qualification", "authorization-decision", "delegation-attenuation", "directory-state", "fault-attribution", "intent-affirmation", "intent-verifiability", "mandate-crossacceptor" ] }, "handshake-proof-layer": { "label": "Handshake use case", "url": "/partners/handshake-proof-layer/", "anchors": [ "admission-binding", "authority-qualification", "conduct-record", "directory-state", "eval-administration", "fault-attribution", "intent-verifiability", "knowledge-timestamp", "originproof", "screening-attestation" ] }, "harness": { "label": "Harness use case", "url": "/harness/", "anchors": [ "bpa-attestation", "bpa-budget", "canon-tiers", "meter-witness", "sigr-bond" ] }, "harness-proof": { "label": "Harness proof surface", "url": "/partners/harness-proof/", "anchors": [ "bpa-attestation", "bpa-budget", "causal-path", "diurnal-bond", "eval-administration", "knowledge-timestamp", "parametric-trigger", "proof-transition", "sigr-bond", "structural-lateration" ] }, "harvey": { "label": "Harvey use case", "url": "/harvey/", "anchors": [ "analysis-replay", "causal-path", "erasure-receipt" ] }, "ice-proof": { "label": "ICE proof surface", "url": "/partners/ice-proof/", "anchors": [ "admission-binding", "amplihive", "authority-carriage", "authority-qualification", "authority-revocation", "canon-tiers", "causal-path", "delegation-attenuation", "effect-quiescence", "hahs", "knowledge-timestamp", "ledger-parity", "mandate-aggregate", "multi-source-divergence", "portfolio-exposure", "proof-transition-portable", "screening-attestation", "sequence-attestation", "settlement-feed", "sovereign-receipt-registry", "spectralzk", "submission-attestation", "supersession-receipt", "viewkey" ] }, "kalshi-proof": { "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/", "anchors": [ "effect-closure", "hahs", "multi-source-divergence", "pbs", "proof-transition-portable", "r3pv", "screening-attestation", "settlement-feed", "sigr-consensus", "supersession-receipt" ] }, "kodiak-robotics-proof": { "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/", "anchors": [ "causal-path", "control-replay", "effect-closure", "hiveseal-qpuf", "perimeter-bond", "ppr", "proof-transition", "provable-machines", "s2s" ] }, "kodiak-solutions": { "label": "Kodiak Solutions use case", "url": "/kodiak/", "anchors": [ "ledger-parity" ] }, "lemonade": { "label": "Lemonade use case", "url": "/lemonade/", "anchors": [ "analysis-replay", "control-replay", "parametric-trigger", "portfolio-exposure" ] }, "machines": { "label": "Provable machines", "url": "/machines/", "anchors": [ "causal-path", "control-replay", "effect-closure", "meter-witness", "proof-transition", "protected-flow", "protected-flow-fleets-composite", "provable-machines", "r3pv" ] }, "marqeta": { "label": "Marqeta use case", "url": "/partners/marqeta/", "anchors": [ "admission-binding", "authority-carriage", "authority-revocation", "authorization-decision", "effect-quiescence", "ledger-parity", "mandate-aggregate", "mandate-conformance", "mandate-crossacceptor" ] }, "mastercard": { "label": "Mastercard use case", "url": "/partners/mastercard/", "anchors": [ "admission-binding", "authority-delegation", "authority-revocation", "conduct-record", "delegation-attenuation", "directory-state", "hive-ledger", "intent-verifiability", "ledger-parity", "mandate-conformance", "mandate-crossacceptor", "mandate-crossreference", "proof-credit" ] }, "mercor-pipeline-integrity": { "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/", "anchors": [ "corpus-commitment", "eval-administration", "evar", "originproof", "sigr-mir" ] }, "micro1-certified-proof": { "label": "micro1 certified proof", "url": "/partners/micro1-certified-proof/", "anchors": [ "corpus-commitment", "eval-administration", "evar", "originproof" ] }, "midfirst": { "label": "MidFirst use case", "url": "/midfirst/", "anchors": [ "authority-qualification", "authority-revocation", "authorization-decision", "canon-tiers", "effect-quiescence", "ledger-parity", "mandate-conformance", "screening-attestation", "submission-attestation" ] }, "netskope": { "label": "Netskope use case", "url": "/netskope/", "anchors": [ "analysis-replay", "authority-revocation", "carnac-governance", "effect-quiescence", "erasure-receipt", "knowledge-timestamp", "submission-attestation" ] }, "okx": { "label": "OKX use case", "url": "/okx/", "anchors": [ "mandate-conformance" ] }, "ondo": { "label": "Ondo use case", "url": "/ondo/", "anchors": [ "ledger-parity", "screening-attestation" ] }, "openrouter-proof": { "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/", "anchors": [ "afir", "afir-s3", "assembly-receipt", "cache-epoch", "entropy-custody", "hivebound-envelope", "numeric-lineage", "routing-receipt", "sigr-bill", "sigr-cachesign", "sigr-chain", "sigr-consensus", "sigr-manifest", "sigr-mir", "stipryn" ] }, "polymarket-proof": { "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/", "anchors": [ "multi-source-divergence", "pbs", "screening-attestation", "settlement-feed", "supersession-receipt" ] }, "postman-proof": { "label": "Postman proof surface", "url": "/partners/postman-proof/", "anchors": [ "afir-s3", "carnac", "carnac-gateway", "inkframe-non-mutation", "inkframe-v1", "mcp-relay-layer", "proof-pre-fill" ] }, "ramp": { "label": "Ramp use case", "url": "/ramp/", "anchors": [ "causal-path", "mandate-conformance" ] }, "revolut": { "label": "Revolut use case", "url": "/partners/revolut/", "anchors": [ "admission-binding", "authority-delegation", "authority-qualification", "authority-revocation", "authorization-decision", "delegation-attenuation", "effect-closure", "effect-quiescence", "fault-attribution", "intent-verifiability", "ledger-parity", "mandate-conformance", "mandate-crossacceptor", "recovery-determination" ] }, "robinhood-proof": { "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/", "anchors": [ "authority-delegation", "hive-receipt", "knowledge-timestamp", "ledger-parity", "mandate-aggregate", "mandate-conformance", "pbs", "portfolio-exposure", "shod", "sigr-gitm" ] }, "robot-com-proof": { "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/", "anchors": [ "control-replay", "effect-closure", "hiveseal-qpuf", "ppr", "proof-transition", "provable-machines", "r3pv" ] }, "robotics": { "label": "Robotics", "url": "/robotics/", "anchors": [ "ppr", "provable-machines" ] }, "signifyd": { "label": "Signifyd use case", "url": "/partners/signifyd/", "anchors": [ "authorization-decision", "delegation-attenuation", "fault-attribution", "intent-affirmation", "intent-verifiability", "mandate-conformance", "mandate-crossacceptor", "recovery-determination" ] }, "six-configurator": { "label": "SIX configurator", "url": "/six/configurator/", "anchors": [ "ledger-parity" ] }, "snowflake": { "label": "Snowflake use case", "url": "/snowflake/", "anchors": [ "ledger-parity" ] }, "snowflake-proof": { "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/", "anchors": [ "assembly-receipt", "authority-delegation", "canon-tiers", "disclosure-free-replay", "egress-bond", "erasure-receipt", "evar", "hahs", "ledger-parity", "multi-source-divergence", "proof-transition-portable", "sigr-chain", "sigr-gca", "sigr-mir", "structural-lateration", "viewkey" ] }, "stripe": { "label": "Stripe proof surface", "url": "/partners/stripe/", "anchors": [ "admission-binding", "authority-carriage", "authority-delegation", "authority-qualification", "authority-revocation", "authorization-decision", "canon-tiers", "delegation-attenuation", "directory-state", "fault-attribution", "hive-ledger", "hive-receipt", "hivebound-envelope", "imprimatur", "intent-affirmation", "intent-verifiability", "mandate-aggregate", "mandate-conformance", "mandate-crossacceptor", "mandate-crossreference", "multi-source-divergence", "originproof", "protected-flow", "r3pv", "screening-attestation", "sigr-mir", "stipryn" ] }, "surge-neutrality": { "label": "Surge neutrality", "url": "/partners/surge-neutrality/", "anchors": [ "corpus-commitment", "eval-administration", "evar", "originproof" ] }, "visa": { "label": "Visa use case", "url": "/partners/visa/", "anchors": [ "admission-binding", "directory-state", "mandate-conformance" ] }, "worldpay": { "label": "Worldpay use case", "url": "/partners/worldpay/", "anchors": [ "admission-binding", "fault-attribution", "intent-affirmation", "intent-verifiability", "ledger-parity", "mandate-conformance", "recovery-determination", "sequence-attestation" ] } }, "use_case_mappings": [ { "id": "circle-gateway-erc-1271", "title": "Circle Gateway ERC-1271 authorization, with an independent Hive receipt beside it", "partner_page": { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, "announced": "Circle Gateway support for ERC-1271, noted August 4, 2026.", "summary": "Circle Gateway supports ERC-1271, so a smart contract, smart wallet, or application can reach a unified USDC balance while its existing authorization logic keeps making the decision. Circle's Gateway attestation stays authoritative. Hive sits beside that flow and signs an independently checkable receipt. The current countersigner is Hive-operated; true institutional independence requires non-Hive key and log custody.", "hive_role": "Hive operates a separate countersigner and log for the flow. The evidence is independently checkable; true institutional independence requires non-Hive key and log custody. It does not evaluate, gate, replace or change any authorization policy, it does not hold or move funds, it does not sign on behalf of any wallet, and it is never in the authorization path. Emission is out of band, so nothing in the payment path waits on a receipt.", "secrets_boundary": "No secret crosses the boundary. Private keys, seeds, session material, raw call data and raw request bodies are never sent, held or stored. Addresses, chain identifiers, public references and digests are the only inputs, and every digest is caller computed.", "no_new_primitive": "No new canonical primitive was created for ERC-1271, and source analysis of the existing contracts found no unfilled proof boundary that would justify one. Signature validation by a contract is an authorization fact, which authority.delegation already binds as issuer, subject, scope and constraints. Fixing what must be proven before transmission is proof.demand. Pre commitment of a declared intent is hivebound.envelope. Recording that the application's own gates were evaluated before the action is imprimatur.clearance. Requested against materialized chain is exactly the declared against observed split in divergence.record. The lifecycle across chains is proof.transition with a fixed size export in proof.transition.portable. The end state is effect.closure. A new type would duplicate these boundaries rather than fill a gap, so the mapping reuses them.", "citations": [ { "label": "Circle Gateway product page", "url": "https://www.circle.com/gateway", "note": "Already cited on the Circle partner page." }, { "label": "Circle Gateway developer documentation", "url": "https://developers.circle.com/gateway", "note": "Official documentation for the unified USDC balance, non custodial Gateway Wallet contracts and sub second mint on a destination chain." }, { "label": "ERC-1271 standard", "url": "https://eips.ethereum.org/EIPS/eip-1271", "note": "The signature validation standard itself." }, { "label": "Announcement provenance", "url": null, "note": "The August 4, 2026 ERC-1271 announcement reached this work as material shared privately with the team. That is not a public citation and is not presented as one; the public Circle links above are what this mapping cites." } ], "bindings": [ { "field": "chain_id", "what": "The chain identifier the authorization is scoped to and the chain the balance is requested on.", "binds_to": "hivebound-envelope", "also": [ "authority-delegation" ] }, { "field": "gateway_or_smart_wallet_address", "what": "The Gateway wallet contract or smart wallet address acting as the subject of the authorization.", "binds_to": "authority-delegation", "also": [ "hivebound-envelope" ] }, { "field": "erc1271_validation_contract", "what": "The address of the contract whose isValidSignature result the flow relies on.", "binds_to": "authority-delegation", "also": [ "imprimatur" ] }, { "field": "authorization_policy_version_or_digest", "what": "The version string or canonical digest of the authorization logic in force, as the application declares it. Hive records the declared value and never interprets or alters the policy.", "binds_to": "imprimatur", "also": [ "authority-delegation" ] }, { "field": "signed_intent_digest", "what": "The digest of the intent that was signed, fixed before transmission. The digest travels, the intent body does not.", "binds_to": "stipryn", "also": [ "hivebound-envelope" ] }, { "field": "requested_chain_and_materialized_chain", "what": "The chain requested and the chain the balance actually materialized on, carried as separate declared and observed values so any difference stays visible.", "binds_to": "multi-source-divergence", "also": [ "proof-transition" ] }, { "field": "circle_gateway_attestation_reference", "what": "Circle's own Gateway attestation reference or its digest, preserved as an admitted input rather than restated as a Hive claim.", "binds_to": "proof-transition", "also": [ "effect-closure" ] }, { "field": "amount_and_asset", "what": "The USDC amount and asset identifier as declared and as observed.", "binds_to": "effect-closure", "also": [ "settlement-feed" ] }, { "field": "policy_decision", "what": "The allow or deny the application's own authorization logic returned, recorded as an outcome of that logic.", "binds_to": "imprimatur", "also": [ "authority-delegation" ] }, { "field": "execution_transaction", "what": "The execution transaction reference on the materialized chain.", "binds_to": "effect-closure", "also": [ "proof-transition" ] }, { "field": "effect_closure", "what": "Completion status and idempotency key bound to the observed outcome and its evidence digests.", "binds_to": "effect-closure", "also": [ "r3pv" ] }, { "field": "settlement_reference_values", "what": "Where a settlement value is what the flow is measured against, that value can be independently signed rather than taken on trust. Supported where a feed exists.", "binds_to": "settlement-feed", "also": [ "multi-source-divergence" ] }, { "field": "portable_export", "what": "A fixed size export of the whole lifecycle for a counterparty, auditor or insurer to check offline.", "binds_to": "proof-transition-portable", "also": [ "protected-flow" ] }, { "field": "weakest_verified_boundary", "what": "The weakest verified boundary across the receipt group for one flow, stated rather than implied. Available through the external Protected Flow and R3Pv service where that service is in use.", "binds_to": "r3pv", "also": [ "protected-flow" ] } ], "anchors_used": [ "authority-delegation", "effect-closure", "hivebound-envelope", "imprimatur", "multi-source-divergence", "proof-transition", "proof-transition-portable", "protected-flow", "r3pv", "settlement-feed", "stipryn" ], "creates_new_primitive": false }, { "id": "submission-provenance-spr", "title": "Submission provenance, expressed as an existing pre-commitment plus an existing authority chain", "partner_page": { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, "announced": null, "summary": "A filer wants to prove what it submitted to a venue or a regulator, that the submitted artifact was fixed before transmission rather than reconstructed afterwards, and that the person or system that submitted it was entitled to. That is a real and frequently asked question. It is answered in full by two contracts that already exist and are already deployed.", "hive_role": "hivebound.envelope fixes the submitted artifact before it leaves the filer, so a later copy cannot be substituted for the one actually sent. authority.delegation binds who was entitled to submit it, under what scope, and with what constraints. Composing the two produces exactly the submission provenance claim, with no gap left over.", "secrets_boundary": "No secret crosses the boundary. The submitted content itself need never be transmitted to Hive, only its digest, which the filer computes.", "no_new_primitive": "No new canonical primitive was created for submission provenance, and a source level review of the deployed contracts found no unfilled proof boundary that would justify one. A primitive is only warranted when an existing contract cannot express the claim. Here two can, together, exactly. Registering a third name for their composition would inflate the canon without adding a single provable fact, which the honesty rules of this registry forbid.", "bindings": [ { "field": "submitted_artifact_sha256", "what": "The digest of the artifact as it stood at the moment of transmission, computed by the filer. Fixing it before it leaves is what stops a later copy being substituted for the one actually sent.", "binds_to": "hivebound-envelope", "also": [ "stipryn" ] }, { "field": "submitter_identity", "what": "The person, system or service account that transmitted the artifact, bound as the subject of a delegation rather than asserted in a log line.", "binds_to": "authority-delegation", "also": [] }, { "field": "submission_scope", "what": "What that submitter was entitled to submit, to which venue, and under what constraints and expiry.", "binds_to": "authority-delegation", "also": [ "imprimatur" ] }, { "field": "destination_venue", "what": "The venue or regulator the artifact was transmitted to, recorded as part of the pre-commitment so the destination cannot be restated afterwards.", "binds_to": "hivebound-envelope", "also": [] }, { "field": "transmission_order_and_time", "what": "Where the submission sat in an ordered sequence, and between which two externally supplied times it must have occurred. Needed when a filing deadline rather than the content is what is disputed.", "binds_to": "sequence-attestation", "also": [] } ], "anchors_used": [ "authority-delegation", "hivebound-envelope", "imprimatur", "sequence-attestation", "stipryn" ], "creates_new_primitive": false }, { "id": "issuer-event-attestation-iea", "title": "Issuer event attestation, deliberately not registered until its public anchor exists", "partner_page": { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, "announced": null, "summary": "An issuer event attestation would let an issuer sign a corporate action or a disclosure event in a form any third party could check against a public, append only record that the issuer does not control. The signing half of that is straightforward and Hive already has it. The public anchor half is the part that carries the value, because an append only log the issuer controls proves considerably less than one it does not.", "hive_role": "The registry describes sequence.attestation as an ordering record with a public blockchain block and an external RFC 3161 timestamp. Each deployment and receipt still needs verification. The earlier registry observation recorded an unresolved ct.thehiveryiq.com host and accumulator leaf_count 0 with no public witness; that observation is not a fresh availability check. Independent public-log acceptance remains unestablished here.", "secrets_boundary": "No secret crosses the boundary. Event digests and public references only.", "no_new_primitive": "Issuer event attestation remains on hold. Acceptance requires a publicly reachable log, real inclusion and consistency proofs against retained checkpoints, durable restart and recovery evidence, and a witness whose keys and operations are outside Hive's control. A Hive-operated countersigner, external timestamp or declaration of a deployed schema does not satisfy that requirement.", "bindings": [ { "field": "issuer_event_sha256", "what": "The digest of the corporate action or disclosure event as the issuer fixed it.", "binds_to": "hivebound-envelope", "also": [] }, { "field": "issuer_identity_and_authority", "what": "Which issuer signed, and under what delegated scope the signer acted on the issuer's behalf.", "binds_to": "authority-delegation", "also": [] }, { "field": "event_order_and_external_bracket", "what": "The stated order and external time bracket. Verify the source identities, signatures and references for the actual receipt; registry metadata alone does not establish current deployment acceptance.", "binds_to": "sequence-attestation", "also": [] }, { "field": "public_inclusion_proof", "what": "A verifiable inclusion proof against an identified public-log checkpoint, with consistency evidence and a genuinely independent witness. Current operational acceptance is not established by this registry entry, so issuer event attestation remains unregistered.", "binds_to": "sequence-attestation", "also": [] }, { "field": "later_correction_or_withdrawal", "what": "A subsequent restatement or withdrawal of the event, bound to the original rather than replacing it silently.", "binds_to": "supersession-receipt", "also": [ "effect-closure" ] } ], "anchors_used": [ "authority-delegation", "effect-closure", "hivebound-envelope", "sequence-attestation", "supersession-receipt" ], "creates_new_primitive": false } ], "entries": [ { "anchor": "absence-scope", "aliases": [ "Scoped Absence Assertion" ], "canonical_name": "Scoped Absence Assertion", "canonical_type": "absence.scope", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['absence.scope']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Scoped Absence Assertion receipt. Saying a document", "does_not_prove": "does not contain something is only meaningful if you say where you looked, what you looked for, with what engine, and at what threshold, so all of that is inside the signed body, bounded to one box in the pixel space of a committed render profile. The service recomputes the predicate digest over the canonical predicate and its version. A party that evaluates the same box at a different threshold gets an off threshold indeterminate result rather than a result that contradicts the assertion. It does not run the search; negative_independently_reproduced_by_service is fixed to false, and the assertion is scoped to the committed box and never to the whole document.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/absence-scope-v1.json", "mint_route": "/mint/absence-scope", "verify_route": "/verify/absence-scope", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/absence-scope", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "assertion_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "render_profile_digest_sha256": "<64 hex chars, sha256 of your evidence>", "page_index": "", "box_x": "", "box_y": "", "box_width": "", "box_height": "", "predicate_kind": "", "predicate_canonical_form": "", "predicate_version": "", "predicate_digest_sha256": "<64 hex chars, sha256 of your evidence>", "extraction_engine_ref": "", "model_version_commitment_sha256": "<64 hex chars, sha256 of your evidence>", "detection_threshold": "", "threshold_scale_ref": "", "searched_at": "", "result": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/absence-scope", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/absence-scope -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"assertion_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"render_profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"page_index\": \"\", \"box_x\": \"\", \"box_y\": \"\", \"box_width\": \"\", \"box_height\": \"\", \"predicate_kind\": \"\", \"predicate_canonical_form\": \"\", \"predicate_version\": \"\", \"predicate_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"extraction_engine_ref\": \"\", \"model_version_commitment_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"detection_threshold\": \"\", \"threshold_scale_ref\": \"\", \"searched_at\": \"\", \"result\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.763, "mint_p95_ms": 3.113, "verify_p50_ms": 1.953, "verify_p95_ms": 2.216, "iterations": 200, "artifact_bytes": 2281, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "negative_independently_reproduced_by_service": false, "assertion_scoped_to_committed_box": true, "predicate_digest_recomputed": "string", "predicate_digest_recomputes": "boolean", "box_area_pixels": "integer", "search_precedes_this_receipt": "boolean", "negative_asserted": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "clause not present", "scoped negative finding", "searched box and predicate record", "diligence completeness", "missing disclosure check" ], "fit_examples": [], "partner_pages": [], "related": [ "divergence-attestation", "render-profile" ], "operational": false, "state_label": "Production deployment reported", "search_text": "scoped absence assertion absence.scope absence-scope scoped absence assertion clause not present scoped negative finding searched box and predicate record diligence completeness missing disclosure check scoped absence assertion receipt. saying a document does not contain something is only meaningful if you say where you looked, what you looked for, with what engine, and at what threshold, so all of that is inside the signed body, bounded to one box in the pixel space of a committed render profile. the service recomputes the predicate digest over the canonical predicate and its version. a party that evaluates the same box at a different threshold gets an off threshold indeterminate result rather than a result that contradicts the assertion. it does not run the search; negative_independently_reproduced_by_service is fixed to false, and the assertion is scoped to the committed box and never to the whole document. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "admission-binding", "aliases": [], "canonical_name": "Admission Binding Receipt", "canonical_type": "admission.binding", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['admission.binding']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a supplied admission credential and one supplied conduct receipt yield byte identical subject commitments under one disclosed binding salt that the admission credential already commits to, and that the extracted conduct instant is at or after the stated admission instant and within the signed maximum separation.", "does_not_prove": "It does not attest that the admission credential is validly issued, that any admitting party is entitled to admit, that either identifier is true, that the subject is a person or entity of any asserted kind, that the conduct occurred, or that the conduct is authorized. It does not decide authenticity beyond the checked signatures and stated verification class, completeness of records, actual knowledge, intent, fault, fraud, contractual effect, legal effect, regulatory effect, eligibility, title, responsibility, liability, or any dispute. It does not authorize admission, access, conduct, a transaction, credential presentation, disclosure, or reliance by any party. It does not establish that either source artifact is complete, exclusive, current, unrevoked, unaltered before receipt, or truthful. It cannot decide whether an absent conduct receipt exists, whether another admission credential exists, whether the admitting party relied on the credential, whether the conduct service observed all conduct, or whether any party knew of the other artifact.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/admission-binding-v1.json", "mint_route": null, "verify_route": "/verify/admission-binding", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/admission-binding", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/admission-binding", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/admission-binding -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 4.866, "mint_p95_ms": 8.7, "verify_p50_ms": 3.765, "verify_p95_ms": 4.342, "iterations": 200, "artifact_bytes": 2906, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/admission-binding.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "agent admission to a network", "binding an agent to the terms it entered under", "membership evidence for a counterparty" ], "fit_examples": [ "Networks", "Marketplaces", "Payment schemes", "Marqeta", "Handshake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "visa", "label": "Visa use case", "url": "/partners/visa/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "authority-qualification", "delegation-attenuation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "admission binding receipt admission.binding admission-binding agent admission to a network binding an agent to the terms it entered under membership evidence for a counterparty networks marketplaces payment schemes marqeta handshake cisco use case ice proof surface stripe proof surface mastercard use case worldpay use case visa use case revolut use case marqeta use case handshake use case this receipt attests only that a supplied admission credential and one supplied conduct receipt yield byte identical subject commitments under one disclosed binding salt that the admission credential already commits to, and that the extracted conduct instant is at or after the stated admission instant and within the signed maximum separation. it does not attest that the admission credential is validly issued, that any admitting party is entitled to admit, that either identifier is true, that the subject is a person or entity of any asserted kind, that the conduct occurred, or that the conduct is authorized. it does not decide authenticity beyond the checked signatures and stated verification class, completeness of records, actual knowledge, intent, fault, fraud, contractual effect, legal effect, regulatory effect, eligibility, title, responsibility, liability, or any dispute. it does not authorize admission, access, conduct, a transaction, credential presentation, disclosure, or reliance by any party. it does not establish that either source artifact is complete, exclusive, current, unrevoked, unaltered before receipt, or truthful. it cannot decide whether an absent conduct receipt exists, whether another admission credential exists, whether the admitting party relied on the credential, whether the conduct service observed all conduct, or whether any party knew of the other artifact. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "afir-ocr-docproof", "aliases": [], "canonical_name": "AFiR-OCR DocProof", "canonical_type": "afir.ocr.docproof", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['afir.ocr.docproof']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": "The inspected record does not contain an attributable Canon 46 report or reviewer provenance. Do not attribute the publication hold or its release to an independent review. Verify the filing record and the current release status directly before relying on this row.", "proves": "AFiR-OCR DocProof receipt. Scoped to extraction provenance only: what an OCR engine read, from where, and under what confidence metadata.", "does_not_prove": "It does not attest that the extracted value is correct, and it does not share AFIR fragment routing infrastructure; shares_afir_route_backend is fixed to false because this contract has no dependency on the afir.route Modal backend.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/afir-ocr-docproof-v1.json", "mint_route": "/mint/afir-ocr-docproof", "verify_route": "/verify/afir-ocr-docproof", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/afir-ocr-docproof", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "document_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/afir-ocr-docproof", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/afir-ocr-docproof -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"document_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.511, "mint_p95_ms": 2.888, "verify_p50_ms": 1.798, "verify_p95_ms": 2.202, "iterations": 200, "artifact_bytes": 1020, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "shares_afir_route_backend": false, "extraction_correctness_proven": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "document extraction provenance", "OCR receipt", "private reduction to practice" ], "fit_examples": [], "partner_pages": [], "related": [ "afir" ], "operational": false, "state_label": "Production deployment reported", "search_text": "afir-ocr docproof afir.ocr.docproof afir-ocr-docproof document extraction provenance ocr receipt private reduction to practice afir-ocr docproof receipt. scoped to extraction provenance only: what an ocr engine read, from where, and under what confidence metadata. it does not attest that the extracted value is correct, and it does not share afir fragment routing infrastructure; shares_afir_route_backend is fixed to false because this contract has no dependency on the afir.route modal backend. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "afir-s3", "aliases": [], "canonical_name": "AFiR-S3 (Agentic Receipts)", "canonical_type": "afir.s3", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['afir.s3']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "AFiR-S3 agentic receipt. Attests that a segment_id, a caller declared lifecycle stage, and a caller held storage-reference digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that the referenced tool scope, action, or reward attribution actually executed as declared; that determination remains with whatever system originated the underlying agent trajectory.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/afir-s3-v1.json", "mint_route": "/mint/afir-s3", "verify_route": "/verify/afir-s3", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/afir-s3", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "segment_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "lifecycle_stage": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/afir-s3", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/afir-s3 -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"segment_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"lifecycle_stage\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.515, "mint_p95_ms": 2.911, "verify_p50_ms": 1.762, "verify_p95_ms": 2.186, "iterations": 200, "artifact_bytes": 991, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "canon_anchor_fixed": true }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/agents/", "use_cases": [ "agent tool scope", "action before execution", "context mutation", "reward attribution", "agent memory edit" ], "fit_examples": [ "Fireworks", "OpenRouter", "Cisco", "Postman", "Snowflake" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" } ], "related": [ "authority-delegation", "effect-closure", "sigr-chain" ], "operational": false, "state_label": "Production deployment reported", "search_text": "afir-s3 (agentic receipts) afir.s3 afir-s3 agent tool scope action before execution context mutation reward attribution agent memory edit fireworks openrouter cisco postman snowflake fireworks openrouter proof surface postman proof surface aiuc proof surface afir-s3 agentic receipt. attests that a segment_id, a caller declared lifecycle stage, and a caller held storage-reference digest were recorded and signed at recorded_at. it does not attest that the referenced tool scope, action, or reward attribution actually executed as declared; that determination remains with whatever system originated the underlying agent trajectory. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "afir-stream", "aliases": [], "canonical_name": "AFiR-Stream", "canonical_type": "afir.stream", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['afir.stream']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "AFiR-Stream receipt. Attests that a stream_session_id and a caller held audio segment digest were recorded and signed at recorded_at, using Ed25519 today.", "does_not_prove": "It does not attest that post quantum signing covers this stream; pq_enabled is fixed to false because this deployment signs with Ed25519, not a post quantum algorithm, and that must never be caller overridable.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/afir-stream-v1.json", "mint_route": "/mint/afir-stream", "verify_route": "/verify/afir-stream", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/afir-stream", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "stream_session_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/afir-stream", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/afir-stream -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"stream_session_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.487, "mint_p95_ms": 2.858, "verify_p50_ms": 1.747, "verify_p95_ms": 1.993, "iterations": 200, "artifact_bytes": 991, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "pq_enabled": false, "algorithm_in_use": "Ed25519" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-stream/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-stream/", "use_cases": [ "voice receipt", "streaming session anchor", "call center", "HIPAA voice", "real time audio" ], "fit_examples": [ "Cartesia", "Fish Audio", "Cerebras", "Cisco" ], "partner_pages": [ { "key": "cartesia-proof", "label": "Cartesia proof surface", "url": "/partners/cartesia-proof/" }, { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" } ], "related": [ "foretoken", "s2s" ], "operational": false, "state_label": "Production deployment reported", "search_text": "afir-stream afir.stream afir-stream voice receipt streaming session anchor call center hipaa voice real time audio cartesia fish audio cerebras cisco cartesia proof surface fish audio proof surface cerebras technical companion afir-stream receipt. attests that a stream_session_id and a caller held audio segment digest were recorded and signed at recorded_at, using ed25519 today. it does not attest that post quantum signing covers this stream; pq_enabled is fixed to false because this deployment signs with ed25519, not a post quantum algorithm, and that must never be caller overridable. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "agent-coalition", "aliases": [ "Agent Coalition Attestation", "Coalition Receipt" ], "canonical_name": "Agent Coalition Attribution Receipt", "canonical_type": "agent.coalition", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['agent.coalition']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records which member agents joined a coalition, what each contributed to a single coordinated decision, and how the decision rule combined those contributions.", "does_not_prove": "It does not prove any member acted in good faith, does not prove the coalition was authorized, and does not prove the coordinated action succeeded.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/agent-coalition-v1.json", "mint_route": "/mint/agent-coalition", "verify_route": "/verify/agent-coalition", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/agent-coalition", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/agent-coalition", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/agent-coalition -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/agent-coalition.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "two robots coordinated a lift", "which agent carried the decision", "multi agent deference record", "fleet level joint action attribution", "shared task decision split" ], "fit_examples": [], "partner_pages": [], "related": [ "authority-carriage", "fault-attribution", "safety-envelope" ], "operational": false, "state_label": "Production deployment reported", "search_text": "agent coalition attribution receipt agent.coalition agent-coalition agent coalition attestation coalition receipt two robots coordinated a lift which agent carried the decision multi agent deference record fleet level joint action attribution shared task decision split this receipt records which member agents joined a coalition, what each contributed to a single coordinated decision, and how the decision rule combined those contributions. it does not prove any member acted in good faith, does not prove the coalition was authorized, and does not prove the coordinated action succeeded. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "agent-metamorphosis", "aliases": [ "Agent Metamorphosis Attestation", "Metamorphosis Receipt" ], "canonical_name": "Agent Self Modification Receipt", "canonical_type": "agent.metamorphosis", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['agent.metamorphosis']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records that an agent's own executable configuration changed, what it was before and after, who authorized the change, and whether the prior configuration remains reproducible.", "does_not_prove": "It does not prove the new configuration is safe, does not prove the change was tested, and does not prove the agent behaved as the new configuration intends.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/agent-metamorphosis-v1.json", "mint_route": "/mint/agent-metamorphosis", "verify_route": "/verify/agent-metamorphosis", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/agent-metamorphosis", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/agent-metamorphosis", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/agent-metamorphosis -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/agent-metamorphosis.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "what the fleet ran before the OTA update", "policy swap on the record", "rollback reachability", "model version change evidence", "stack change reversibility" ], "fit_examples": [], "partner_pages": [], "related": [ "decision-provenance", "determinism-class", "jurisdictional-clearance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "agent self modification receipt agent.metamorphosis agent-metamorphosis agent metamorphosis attestation metamorphosis receipt what the fleet ran before the ota update policy swap on the record rollback reachability model version change evidence stack change reversibility this receipt records that an agent's own executable configuration changed, what it was before and after, who authorized the change, and whether the prior configuration remains reproducible. it does not prove the new configuration is safe, does not prove the change was tested, and does not prove the agent behaved as the new configuration intends. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "analysis-replay", "aliases": [ "analysis replay", "forensic replay receipt", "deterministic analysis proof", "reanalysis receipt" ], "canonical_name": "Analysis Replay Receipt", "canonical_type": "analysis.replay", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['analysis.replay']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a lock manifest signed before data access, an execution record chained to that lock manifest, and a column access manifest signed by the attested runtime satisfy the stated deterministic replay procedure for the named reported outputs. It establishes only that the reported output commitments are the ones produced by the committed script hash, parameter commitment, and environment measurement over the committed dataset snapshot root, and that the runtime recorded no read of any embargoed column at or before the lock instant.", "does_not_prove": "It does not establish that the underlying records are authentic, complete, representative, or correctly collected, that the locked analysis plan was well designed, adequately powered, or free of defect, that the planned outputs commitment was specific enough to exclude any result, or that the analysis script computes what its authors intended. It does not establish that the attested runtime, the data custodian, or the analyst is honest, competent, or uncompromised, and it does not establish that no analysis was performed outside the recorded execution. This receipt decides no contractual, statutory, regulatory, evidentiary, scientific, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no submission, publication, approval, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/analysis-replay-v1.json", "mint_route": "/mint/analysis-replay", "verify_route": "/verify/analysis-replay", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/analysis-replay", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/analysis-replay", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/analysis-replay -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/analysis-replay.test.mjs" ], "integration_link": "/analysis-replay/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/analysis-replay/", "use_cases": [ "proving an analysis rerun on the same inputs lands on the same result", "committing the analysis configuration before the inputs are seen", "naming the first step where two runs diverge instead of arguing about the conclusion", "refusing a replay claim whose lock was written after the run", "letting the other side rerun an analysis without receiving the raw data" ], "fit_examples": [ "Forensics and incident response", "Clinical and lab analysis", "Financial model validation", "AI evaluation teams", "Insurers reviewing a loss analysis" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "harvey", "label": "Harvey use case", "url": "/harvey/" }, { "key": "lemonade", "label": "Lemonade use case", "url": "/lemonade/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" } ], "related": [ "control-replay", "eval-administration", "fault-attribution", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "analysis replay receipt analysis.replay analysis-replay analysis replay forensic replay receipt deterministic analysis proof reanalysis receipt proving an analysis rerun on the same inputs lands on the same result committing the analysis configuration before the inputs are seen naming the first step where two runs diverge instead of arguing about the conclusion refusing a replay claim whose lock was written after the run letting the other side rerun an analysis without receiving the raw data forensics and incident response clinical and lab analysis financial model validation ai evaluation teams insurers reviewing a loss analysis aiuc proof surface cisco use case harvey use case lemonade use case netskope use case this receipt attests only that a lock manifest signed before data access, an execution record chained to that lock manifest, and a column access manifest signed by the attested runtime satisfy the stated deterministic replay procedure for the named reported outputs. it establishes only that the reported output commitments are the ones produced by the committed script hash, parameter commitment, and environment measurement over the committed dataset snapshot root, and that the runtime recorded no read of any embargoed column at or before the lock instant. it does not establish that the underlying records are authentic, complete, representative, or correctly collected, that the locked analysis plan was well designed, adequately powered, or free of defect, that the planned outputs commitment was specific enough to exclude any result, or that the analysis script computes what its authors intended. it does not establish that the attested runtime, the data custodian, or the analyst is honest, competent, or uncompromised, and it does not establish that no analysis was performed outside the recorded execution. this receipt decides no contractual, statutory, regulatory, evidentiary, scientific, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no submission, publication, approval, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "assembly-receipt", "aliases": [], "canonical_name": "Multi-provider assembly receipt", "canonical_type": "assembly.receipt", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['assembly.receipt']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the recorded contribution set in signed_body, applied in the stated order when assembly_policy.order_matters is true, recomputes to the committed Merkle root or equivalent commitment and to final_output_sha256, and, when assembly_policy.expected_contributors is present, that the contribution set contains exactly that set of contributors with no omission, duplication, or unexpected contributor.", "does_not_prove": "It does not attest that any individual contribution is correct, that any named provider or model actually performed the work claimed, or that the final output is fit for any purpose.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/assembly-receipt-v1.json", "mint_route": "/mint/assembly", "verify_route": "/verify/assembly", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/assembly", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/assembly", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/assembly-receipt-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/assembly -H 'content-type: application/json' -d @canon/examples/assembly-receipt-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.58, "mint_p95_ms": 4.928, "verify_p50_ms": 1.858, "verify_p95_ms": 2.083, "iterations": 200, "artifact_bytes": 2315, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "multi provider inference", "model mixture", "context assembly", "retrieval assembly", "router transparency" ], "fit_examples": [ "OpenRouter", "Fireworks", "Cerebras", "Snowflake" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" } ], "related": [ "routing-receipt", "sigr-consensus" ], "operational": false, "state_label": "Production deployment reported", "search_text": "multi-provider assembly receipt assembly.receipt assembly-receipt multi provider inference model mixture context assembly retrieval assembly router transparency openrouter fireworks cerebras snowflake openrouter proof surface fireworks cerebras proof surface snowflake proof surface this receipt attests that the recorded contribution set in signed_body, applied in the stated order when assembly_policy.order_matters is true, recomputes to the committed merkle root or equivalent commitment and to final_output_sha256, and, when assembly_policy.expected_contributors is present, that the contribution set contains exactly that set of contributors with no omission, duplication, or unexpected contributor. it does not attest that any individual contribution is correct, that any named provider or model actually performed the work claimed, or that the final output is fit for any purpose. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "authority-carriage", "aliases": [ "scope carriage", "admitted scope carriage" ], "canonical_name": "Authority Carriage Receipt", "canonical_type": "authority.carriage", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['authority.carriage']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Authority Carriage receipt. Attests that the scope commitment enforced by the named enforcement point at admission equals the scope commitment named in the record of the effect, that the record was written at or after the admission decision, and that the enforcement point and the record point are distinct commitments.", "does_not_prove": "It does not attest that the effect itself was correct, that the admitted scope was the right scope to grant, or that any system outside the supplied admission envelope and the supplied record digest was inspected.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/authority-carriage-v1.json", "mint_route": "/mint/authority-carriage", "verify_route": "/verify/authority-carriage", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/authority-carriage", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authority-carriage", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/authority-carriage -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 4.408, "mint_p95_ms": 4.84, "verify_p50_ms": 3.771, "verify_p95_ms": 4.235, "iterations": 200, "artifact_bytes": 2339, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/authority-carriage.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "proving the approved scope is the scope the effect used", "policy gateway to ledger writer scope evidence", "separating the enforcement point from the record point" ], "fit_examples": [ "Banks", "Payment schemes", "Risk teams", "Platform teams", "Fireblocks", "Marqeta", "Forter" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "admission-binding", "authority-qualification", "delegation-attenuation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "authority carriage receipt authority.carriage authority-carriage scope carriage admitted scope carriage proving the approved scope is the scope the effect used policy gateway to ledger writer scope evidence separating the enforcement point from the record point banks payment schemes risk teams platform teams fireblocks marqeta forter aiuc proof surface cisco use case stripe proof surface fireblocks use case forter use case marqeta use case ice proof surface authority carriage receipt. attests that the scope commitment enforced by the named enforcement point at admission equals the scope commitment named in the record of the effect, that the record was written at or after the admission decision, and that the enforcement point and the record point are distinct commitments. it does not attest that the effect itself was correct, that the admitted scope was the right scope to grant, or that any system outside the supplied admission envelope and the supplied record digest was inspected. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "authority-delegation", "aliases": [], "canonical_name": "Delegated authority chain", "canonical_type": "authority.delegation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['authority.delegation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that this delegation link's scope, constraints, validity window, and depth do not exceed what its named parent link grants, and that its own issuer signed it inside its own validity window.", "does_not_prove": "It does not attest that any action later taken under this authority was itself proper. Chain verification checks revocation only against revocation_snapshot.revoked_delegation_ids as recorded on the links actually supplied in the chain; it does not attest that those snapshots are current at the time a chain is checked, and it cannot see a revocation issued after the snapshot's checked_at or a revocation recorded only in a registry the caller did not supply as part of the chain.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/delegated-authority-v1.json", "mint_route": "/mint/delegation-link", "verify_route": "/verify/delegation-link", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/delegation-link", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/delegation-link", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/delegated-authority-v1.example.child.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/delegation-link -H 'content-type: application/json' -d @canon/examples/delegated-authority-v1.example.child.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.438, "mint_p95_ms": 2.722, "verify_p50_ms": 3.855, "verify_p95_ms": 7.451, "iterations": 200, "artifact_bytes": 1585, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "agent authorization", "scoped delegation", "spend limit", "tool permission", "chain of authority", "ERC-1271", "erc1271", "Circle Gateway", "smart wallet", "smart contract authorization", "unified USDC balance" ], "fit_examples": [ "Circle", "Cisco", "Snowflake", "Chime", "Robinhood" ], "partner_pages": [ { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" } ], "related": [ "afir-s3", "effect-closure", "mandate-conformance", "perimeter-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "delegated authority chain authority.delegation authority-delegation agent authorization scoped delegation spend limit tool permission chain of authority erc-1271 erc1271 circle gateway smart wallet smart contract authorization unified usdc balance circle cisco snowflake chime robinhood chime proof surface circle proof surface cisco use case robinhood proof surface snowflake proof surface stripe proof surface mastercard use case revolut use case this receipt attests that this delegation link's scope, constraints, validity window, and depth do not exceed what its named parent link grants, and that its own issuer signed it inside its own validity window. it does not attest that any action later taken under this authority was itself proper. chain verification checks revocation only against revocation_snapshot.revoked_delegation_ids as recorded on the links actually supplied in the chain; it does not attest that those snapshots are current at the time a chain is checked, and it cannot see a revocation issued after the snapshot's checked_at or a revocation recorded only in a registry the caller did not supply as part of the chain. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "authority-qualification", "aliases": [ "granter qualification" ], "canonical_name": "Granter Qualification Receipt", "canonical_type": "authority.qualification", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['authority.qualification']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named grant, a named entitlement source held by the granting party, and a named qualification record satisfy the stated deterministic containment and ordering procedure over disclosed commitments.", "does_not_prove": "It does not establish that the entitlement source is genuine, accurate, current, lawfully obtained, or sufficient under any contract, mandate, charter, licence, regulation, or statute. It does not establish that the qualifier is competent, diligent, independent in fact, or free of conflict. A qualification of qualified does not make the grant valid, enforceable, or binding, does not ratify the grant, and does not authorize the grantee to act. A qualification of unqualified does not make the grant void, does not establish fault, breach, negligence, or bad faith, and does not allocate risk, responsibility, liability, loss, or remedy. This receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, and it authorizes no action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/authority-qualification-v1.json", "mint_route": null, "verify_route": "/verify/authority-qualification", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authority-qualification", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authority-qualification", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/authority-qualification -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 6.512, "mint_p95_ms": 9.129, "verify_p50_ms": 5.675, "verify_p95_ms": 6.362, "iterations": 200, "artifact_bytes": 4162, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/authority-qualification.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "proving the granter held what it granted", "pre grant entitlement check", "third party delegation risk evidence" ], "fit_examples": [ "Banks", "Identity teams", "Payment schemes", "Risk teams", "Fireblocks", "Forter", "Handshake" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "admission-binding", "authority-revocation", "delegation-attenuation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "granter qualification receipt authority.qualification authority-qualification granter qualification proving the granter held what it granted pre grant entitlement check third party delegation risk evidence banks identity teams payment schemes risk teams fireblocks forter handshake aiuc proof surface circle proof surface cisco use case ice proof surface midfirst use case stripe proof surface revolut use case fireblocks use case forter use case handshake use case this receipt attests only that a named grant, a named entitlement source held by the granting party, and a named qualification record satisfy the stated deterministic containment and ordering procedure over disclosed commitments. it does not establish that the entitlement source is genuine, accurate, current, lawfully obtained, or sufficient under any contract, mandate, charter, licence, regulation, or statute. it does not establish that the qualifier is competent, diligent, independent in fact, or free of conflict. a qualification of qualified does not make the grant valid, enforceable, or binding, does not ratify the grant, and does not authorize the grantee to act. a qualification of unqualified does not make the grant void, does not establish fault, breach, negligence, or bad faith, and does not allocate risk, responsibility, liability, loss, or remedy. this receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, and it authorizes no action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "authority-revocation", "aliases": [], "canonical_name": "Authority Revocation Receipt", "canonical_type": "authority.revocation", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['authority.revocation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named action, a named revocation, and a precommitted propagation bound satisfy the stated deterministic temporal classification procedure.", "does_not_prove": "It does not establish that the revocation is authorized, delivered, valid, enforceable, or effective as a matter of contract or law. It does not establish that the action is authorized, unauthorized, excused, ratified, wrongful, binding, or ineffective. A class of within_propagation_bound does not excuse the action and does not allocate risk, fault, responsibility, liability, loss, or remedy. Notification evidence records only the stated evidence class and does not establish that an actor receives, reads, understands, or has actual knowledge of revocation. This receipt does not decide any contractual, statutory, regulatory, evidentiary, or legal consequence, and it does not authorize any action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/authority-revocation-v1.json", "mint_route": null, "verify_route": "/verify/authority-revocation", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authority-revocation", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authority-revocation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/authority-revocation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 2.741, "mint_p95_ms": 3.069, "verify_p50_ms": 1.967, "verify_p95_ms": 2.372, "iterations": 200, "artifact_bytes": 2599, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/authority-revocation.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "revocation freshness at the moment of use", "stale authority detection", "kill switch evidence" ], "fit_examples": [ "Identity teams", "Security teams", "Platform teams", "Fireblocks", "Marqeta" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "authority-qualification", "delegation-attenuation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "authority revocation receipt authority.revocation authority-revocation revocation freshness at the moment of use stale authority detection kill switch evidence identity teams security teams platform teams fireblocks marqeta cisco use case ice proof surface midfirst use case netskope use case stripe proof surface mastercard use case revolut use case fireblocks use case marqeta use case this receipt attests only that a named action, a named revocation, and a precommitted propagation bound satisfy the stated deterministic temporal classification procedure. it does not establish that the revocation is authorized, delivered, valid, enforceable, or effective as a matter of contract or law. it does not establish that the action is authorized, unauthorized, excused, ratified, wrongful, binding, or ineffective. a class of within_propagation_bound does not excuse the action and does not allocate risk, fault, responsibility, liability, loss, or remedy. notification evidence records only the stated evidence class and does not establish that an actor receives, reads, understands, or has actual knowledge of revocation. this receipt does not decide any contractual, statutory, regulatory, evidentiary, or legal consequence, and it does not authorize any action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "authorization-decision", "aliases": [ "authorization receipt", "decision receipt", "auth decision" ], "canonical_name": "Authorization Decision Receipt", "canonical_type": "authorization.decision", "category": "typed_receipt_contract", "family": "authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['authorization.decision']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer recomputed the stated authorization decision from the supplied confidential evidence at the stated instant.", "does_not_prove": "It does not attest that the underlying goods or services were delivered, that the cardholder intended the purchase, that the merchant is legitimate, that funds settled, that the issuer honored the decision, or that any party outside the named observer agrees with the finding.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/authorization-decision-v1.json", "mint_route": null, "verify_route": "/verify/authorization-decision", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authorization-decision", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/authorization-decision", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/authorization-decision -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 2.759, "mint_p95_ms": 3.184, "verify_p50_ms": 1.965, "verify_p95_ms": 2.278, "iterations": 200, "artifact_bytes": 2128, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/authorization-decision.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "signed approve or decline record", "Reg E burden of proof", "agent authorization dispute", "mandate liveness at the authorization instant" ], "fit_examples": [ "Issuers", "Card networks", "Program managers", "Agent operators", "Fireblocks", "Signifyd", "Forter", "Marqeta" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "bitgo", "label": "BitGo use case", "url": "/bitgo/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "authority-revocation", "fault-attribution", "mandate-conformance", "mandate-crossacceptor" ], "operational": false, "state_label": "Production deployment reported", "search_text": "authorization decision receipt authorization.decision authorization-decision authorization receipt decision receipt auth decision signed approve or decline record reg e burden of proof agent authorization dispute mandate liveness at the authorization instant issuers card networks program managers agent operators fireblocks signifyd forter marqeta american express use case stripe proof surface bitgo use case midfirst use case revolut use case fireblocks use case signifyd use case forter use case marqeta use case this receipt attests only that a named observer recomputed the stated authorization decision from the supplied confidential evidence at the stated instant. it does not attest that the underlying goods or services were delivered, that the cardholder intended the purchase, that the merchant is legitimate, that funds settled, that the issuer honored the decision, or that any party outside the named observer agrees with the finding. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "binding-uncertainty", "aliases": [ "Table Binding Uncertainty" ], "canonical_name": "Table Binding Uncertainty", "canonical_type": "binding.uncertainty", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['binding.uncertainty']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Table Binding Uncertainty receipt. A number lifted out of a table can be read perfectly and still be wrong, because the header it was attached to was guessed, so this receipt carries cell commitments, the header edges that give those cells meaning with a confidence on each edge, and the reading order, and it reports an uncertain binding separately from and at the same time as the value. The service confirms every edge points at a cell that is present, confirms the reading order is a permutation of the committed cells, and counts the edges whose confidence falls below the committed threshold.", "does_not_prove": "It does not read the table and does not attest that any cell value or any header attachment is correct; table_read_by_service is fixed to false.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/binding-uncertainty-v1.json", "mint_route": "/mint/binding-uncertainty", "verify_route": "/verify/binding-uncertainty", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/binding-uncertainty", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "table_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "render_profile_digest_sha256": "<64 hex chars, sha256 of your evidence>", "cells": "", "binding_edges": "", "reading_order": "", "uncertainty_threshold": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/binding-uncertainty", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/binding-uncertainty -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"table_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"render_profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"cells\": \"\", \"binding_edges\": \"\", \"reading_order\": \"\", \"uncertainty_threshold\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.747, "mint_p95_ms": 3.166, "verify_p50_ms": 2.02, "verify_p95_ms": 2.319, "iterations": 200, "artifact_bytes": 2875, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "table_read_by_service": false, "value_verdict_independent_of_binding_verdict": true, "cell_count": "integer", "edge_count": "integer", "every_edge_resolves_to_a_committed_cell": "boolean", "reading_order_is_a_permutation_of_cells": "boolean", "uncertain_binding_edge_count": "integer", "binding_uncertain": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "table cell to header binding", "reading order confidence", "merged cell ambiguity", "right value wrong column", "structured extraction uncertainty" ], "fit_examples": [], "partner_pages": [], "related": [ "divergence-attestation", "tolerance-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "table binding uncertainty binding.uncertainty binding-uncertainty table binding uncertainty table cell to header binding reading order confidence merged cell ambiguity right value wrong column structured extraction uncertainty table binding uncertainty receipt. a number lifted out of a table can be read perfectly and still be wrong, because the header it was attached to was guessed, so this receipt carries cell commitments, the header edges that give those cells meaning with a confidence on each edge, and the reading order, and it reports an uncertain binding separately from and at the same time as the value. the service confirms every edge points at a cell that is present, confirms the reading order is a permutation of the committed cells, and counts the edges whose confidence falls below the committed threshold. it does not read the table and does not attest that any cell value or any header attachment is correct; table_read_by_service is fixed to false. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "bpa-attestation", "aliases": [ "bonded-performance-attestation" ], "canonical_name": "Bonded Performance Attestation (attestation leg)", "canonical_type": "perf.attestation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['perf.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Bonded Performance Attestation binds a performance budget declared before the measurement window to a distribution measured inside that window and to a signed response binding for the measured response set or observation manifest. It is evidence suitable for a parametric threshold.", "does_not_prove": "It does not create or confirm insurance coverage, does not establish that any claim is payable, and does not attest that the output was correct.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/perf-attestation-v1.json", "mint_route": "/mint/bpa/attestation", "verify_route": "/verify/perf-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/bpa/attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/perf-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/perf-attestation-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/perf-attestation -H 'content-type: application/json' -d @canon/examples/perf-attestation-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 6.425, "mint_p95_ms": 6.991, "verify_p50_ms": 1.878, "verify_p95_ms": 4.208, "iterations": 200, "artifact_bytes": 1684, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/typed-receipts.test.mjs" ], "integration_link": "/bonded-performance-attestation/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/bonded-performance-attestation/", "use_cases": [ "SLA measurement", "latency proof", "performance bond", "regression gate", "deployment verification" ], "fit_examples": [ "Harness", "Cerebras", "Fireworks", "Cisco", "Cloudflare", "AIUC" ], "partner_pages": [ { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "harness", "label": "Harness use case", "url": "/harness/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-canon-matching", "label": "Cerebras canon matching", "url": "/partners/cerebras-canon-matching/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "bpa-budget", "parametric-trigger", "sigr-bond", "structural-lateration" ], "operational": false, "state_label": "Production deployment reported", "search_text": "bonded performance attestation (attestation leg) perf.attestation bpa-attestation bonded-performance-attestation sla measurement latency proof performance bond regression gate deployment verification harness cerebras fireworks cisco cloudflare aiuc harness proof surface harness use case cerebras proof surface cerebras canon matching aiuc proof surface fireworks cloudflare proof surface bonded performance attestation binds a performance budget declared before the measurement window to a distribution measured inside that window and to a signed response binding for the measured response set or observation manifest. it is evidence suitable for a parametric threshold. it does not create or confirm insurance coverage, does not establish that any claim is payable, and does not attest that the output was correct. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "bpa-budget", "aliases": [], "canonical_name": "Bonded Performance Attestation (budget leg)", "canonical_type": "perf.budget", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['perf.budget']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records a performance budget declared before its measurement window opens.", "does_not_prove": "It does not assert that the budget was met, does not create or confirm insurance coverage, and does not attest that any output was correct.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/perf-budget-v1.json", "mint_route": "/mint/bpa/budget", "verify_route": "/verify/perf-budget", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/bpa/budget", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/perf-budget", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/perf-budget-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/perf-budget -H 'content-type: application/json' -d @canon/examples/perf-budget-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.446, "mint_p95_ms": 2.819, "verify_p50_ms": 1.793, "verify_p95_ms": 2.185, "iterations": 200, "artifact_bytes": 1020, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/typed-receipts.test.mjs" ], "integration_link": "/bonded-performance-attestation/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/bonded-performance-attestation/", "use_cases": [ "latency budget", "SLA declaration", "capacity commitment", "inference performance", "CI performance gate" ], "fit_examples": [ "Harness", "Cerebras", "Fireworks", "Cisco", "Cloudflare" ], "partner_pages": [ { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "harness", "label": "Harness use case", "url": "/harness/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "bpa-attestation", "sigr-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "bonded performance attestation (budget leg) perf.budget bpa-budget latency budget sla declaration capacity commitment inference performance ci performance gate harness cerebras fireworks cisco cloudflare harness proof surface harness use case cerebras proof surface fireworks cloudflare proof surface this receipt records a performance budget declared before its measurement window opens. it does not assert that the budget was met, does not create or confirm insurance coverage, and does not attest that any output was correct. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "cache-epoch", "aliases": [ "cache epoch", "block epoch receipt", "kv cache epoch", "stale block proof" ], "canonical_name": "Cache Epoch Receipt", "canonical_type": "cache.epoch", "category": "typed_receipt_contract", "family": "serving-state", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['cache.epoch']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Cache Epoch record. Attests that a build epoch identifier derived over a named weight build, a named kernel build, and a named numeric configuration was an input to the block key under which each listed key and value block was addressed, that the epoch recorded for each block was compared against the epoch of the weight set resident in the named high bandwidth memory region at admission of this request, that every block whose recorded epoch differed was unmapped from this request's block table and recomputed under the resident weight set before decode proceeded past its prefix range, and that the residency age of each reused block and the cross epoch read count were recomputed from the recorded monotonic readings rather than supplied.", "does_not_prove": "It does not attest that the response is correct, does not attest anything about latency, does not attest which other parties read any block, does not attest that the resident weight set is the weight set the requesting party expected, and does not attest that any block outside the listed candidate hits was evaluated.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/cache-epoch-v1.json", "mint_route": "/mint/cache-epoch", "verify_route": "/verify/cache-epoch", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/cache-epoch", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/cache-epoch", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/cache-epoch -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/cache-epoch.test.mjs" ], "integration_link": "/serving-state/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/serving-state/", "use_cases": [ "making a build epoch an input to the block key rather than a label beside it", "checking every reused block against the epoch resident in memory at admission", "unmapping and recomputing a mismatched block before decode passes its prefix", "recomputing block residency age from the record", "recomputing the cross epoch read count from the record" ], "fit_examples": [ "Inference providers", "Model routers", "Serving infrastructure teams", "Silicon and serving vendors", "Platform trust teams" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" } ], "related": [ "entropy-custody", "numeric-lineage", "sigr-cachesign" ], "operational": false, "state_label": "Production deployment reported", "search_text": "cache epoch receipt cache.epoch cache-epoch cache epoch block epoch receipt kv cache epoch stale block proof making a build epoch an input to the block key rather than a label beside it checking every reused block against the epoch resident in memory at admission unmapping and recomputing a mismatched block before decode passes its prefix recomputing block residency age from the record recomputing the cross epoch read count from the record inference providers model routers serving infrastructure teams silicon and serving vendors platform trust teams openrouter proof surface fireworks cache epoch record. attests that a build epoch identifier derived over a named weight build, a named kernel build, and a named numeric configuration was an input to the block key under which each listed key and value block was addressed, that the epoch recorded for each block was compared against the epoch of the weight set resident in the named high bandwidth memory region at admission of this request, that every block whose recorded epoch differed was unmapped from this request's block table and recomputed under the resident weight set before decode proceeded past its prefix range, and that the residency age of each reused block and the cross epoch read count were recomputed from the recorded monotonic readings rather than supplied. it does not attest that the response is correct, does not attest anything about latency, does not attest which other parties read any block, does not attest that the resident weight set is the weight set the requesting party expected, and does not attest that any block outside the listed candidate hits was evaluated. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "capability-exercise", "aliases": [ "capability exercise", "independent capability test", "detector exercise receipt" ], "canonical_name": "Capability Exercise Receipt", "canonical_type": "capability.exercise", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['capability.exercise']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named exerciser, independent of the named provider by a recomputed control set comparison, committed a challenge set and a declared expectation for each challenge before the named capability was first contacted, then invoked that capability at the named URL through the stated invocation class at an instant placed against a declared external time reference with a declared drift bound, and that the per challenge outcomes, the detection rate, and the conformance verdict recorded here were recomputed by this service from the committed challenge set and the observed outputs rather than supplied by the caller.", "does_not_prove": "It does not attest that the capability is accurate, effective, or fit for any purpose. It does not attest that any marking scheme is robust. It does not attest that the provider complies with any law, regulation, or standard. It does not attest that the capability was available at any instant other than the one recorded. It does not attest that a different exerciser, network path, or challenge set would produce the same outputs. It does not attest that the provider's published claim is true or false beyond the declared expectation tested here. It does not attest that no equivalent capability exists anywhere else. It does not decide whether any content was generated by any system.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/capability-exercise-v1.json", "mint_route": null, "verify_route": "/verify/capability-exercise", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/capability-exercise", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/capability-exercise", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/capability-exercise -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 8.781, "mint_p95_ms": 9.712, "verify_p50_ms": 4.979, "verify_p95_ms": 5.339, "iterations": 200, "artifact_bytes": 17326, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/capability-exercise.test.mjs" ], "integration_link": "/capability-exercise/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/capability-exercise/", "use_cases": [ "testing a published detection claim from outside the provider", "recording a detection rate that survives a transform such as a re-recording", "showing a capability could not be exercised because no interface was published", "proving the challenge set was fixed before the provider was contacted" ], "fit_examples": [ "Voice and audio providers", "Regulators", "Platform trust teams", "Plaintiff and defence experts", "Insurers" ], "partner_pages": [ { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" } ], "related": [ "bpa-attestation", "directory-state", "eval-administration", "knowledge-timestamp" ], "operational": false, "state_label": "Production deployment reported", "search_text": "capability exercise receipt capability.exercise capability-exercise capability exercise independent capability test detector exercise receipt testing a published detection claim from outside the provider recording a detection rate that survives a transform such as a re-recording showing a capability could not be exercised because no interface was published proving the challenge set was fixed before the provider was contacted voice and audio providers regulators platform trust teams plaintiff and defence experts insurers fish audio proof surface this receipt attests only that a named exerciser, independent of the named provider by a recomputed control set comparison, committed a challenge set and a declared expectation for each challenge before the named capability was first contacted, then invoked that capability at the named url through the stated invocation class at an instant placed against a declared external time reference with a declared drift bound, and that the per challenge outcomes, the detection rate, and the conformance verdict recorded here were recomputed by this service from the committed challenge set and the observed outputs rather than supplied by the caller. it does not attest that the capability is accurate, effective, or fit for any purpose. it does not attest that any marking scheme is robust. it does not attest that the provider complies with any law, regulation, or standard. it does not attest that the capability was available at any instant other than the one recorded. it does not attest that a different exerciser, network path, or challenge set would produce the same outputs. it does not attest that the provider's published claim is true or false beyond the declared expectation tested here. it does not attest that no equivalent capability exists anywhere else. it does not decide whether any content was generated by any system. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "capture-commitment", "aliases": [ "capture commitment", "audio capture receipt", "recording commitment", "segment position proof" ], "canonical_name": "Capture Commitment Receipt", "canonical_type": "capture.commitment", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['capture.commitment']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt fixes what was committed, not what was heard. The recording was never transmitted to the recorder and the recorder never decoded it, so nothing here asserts that the committed digests belong to any particular sound, speaker, event, or file on disk. What is fixed is this: at the stated instant a holder committed a container digest, a decoded digest, and an ordered per second commitment chain over a recording of the stated length, under a secret salt whose commitment is published here. Anyone later holding the recording can recompute all three and show they match, and anyone holding a clip can show it sits at an exact position in that chain with nothing inserted, removed, or reordered around it. No digest here survives a re encode of the audio, and this receipt makes no claim that it does.", "does_not_prove": "It is not a detector, not a watermark, not an identification of a voice, and not a statement that the recording is authentic, consented, human, or machine made.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/capture-commitment-v1.json", "mint_route": "/mint/capture-commitment", "verify_route": "/verify/capture-commitment", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/capture-commitment", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/capture-commitment", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/capture-commitment -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.871, "mint_p95_ms": 5.739, "verify_p50_ms": 1.977, "verify_p95_ms": 2.324, "iterations": 200, "artifact_bytes": 2613, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/capture-commitment.test.mjs" ], "integration_link": "/capture-commitment/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/capture-commitment/", "use_cases": [ "committing a recording without handing over the recording", "keeping a receipt useful after the file is remuxed into a new container", "proving a clip sits at exact offsets inside a longer recording", "showing how many seconds stayed closed on each side of a disclosed clip", "refusing a position claim that moved after the order was committed" ], "fit_examples": [ "Voice and audio providers", "Call centres and recorded lines", "Newsrooms", "Platform trust teams", "Plaintiff and defence experts", "Insurers" ], "partner_pages": [ { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" } ], "related": [ "capability-exercise", "knowledge-timestamp", "media-origin-receipt", "originproof", "ppr" ], "operational": false, "state_label": "Production deployment reported", "search_text": "capture commitment receipt capture.commitment capture-commitment capture commitment audio capture receipt recording commitment segment position proof committing a recording without handing over the recording keeping a receipt useful after the file is remuxed into a new container proving a clip sits at exact offsets inside a longer recording showing how many seconds stayed closed on each side of a disclosed clip refusing a position claim that moved after the order was committed voice and audio providers call centres and recorded lines newsrooms platform trust teams plaintiff and defence experts insurers fish audio proof surface this receipt fixes what was committed, not what was heard. the recording was never transmitted to the recorder and the recorder never decoded it, so nothing here asserts that the committed digests belong to any particular sound, speaker, event, or file on disk. what is fixed is this: at the stated instant a holder committed a container digest, a decoded digest, and an ordered per second commitment chain over a recording of the stated length, under a secret salt whose commitment is published here. anyone later holding the recording can recompute all three and show they match, and anyone holding a clip can show it sits at an exact position in that chain with nothing inserted, removed, or reordered around it. no digest here survives a re encode of the audio, and this receipt makes no claim that it does. it is not a detector, not a watermark, not an identification of a voice, and not a statement that the recording is authentic, consented, human, or machine made. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "causal-path", "aliases": [], "canonical_name": "Causal Path Receipt", "canonical_type": "causal.path", "category": "typed_receipt_contract", "family": "provenance", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['causal.path']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that a named sequence of receipts forms a digest continuous chain from one origin receipt to one terminus receipt with no unreceipted gap between them, that each step's declared input digest equals the prior step's declared output digest, that the recorded times do not run backwards, and that the continuity finding was recomputed by this service rather than supplied by the caller. Digest continuity is not causation.", "does_not_prove": "This receipt does not attest that the origin caused the terminus, that the terminus caused the claimed effect, that the claimed effect occurred at all, or that any harm was suffered by anyone, and this service never receives the description of the claimed effect. It does not attest that the chain presented is the only chain, that no parallel or intervening cause existed outside it, or that the steps chosen are the ones a court, regulator, or investigator would consider relevant. It establishes no legal liability and is not an expert opinion on causation.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/causal-path-v1.json", "mint_route": "/mint/causal/path", "verify_route": "/verify/causal-path", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/causal/path", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/causal-path", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/causal-path -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 8.167, "mint_p95_ms": 9.649, "verify_p50_ms": 7.654, "verify_p95_ms": 8.861, "iterations": 200, "artifact_bytes": 2447, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/causal-path.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "digest continuous receipt path", "incident evidence linkage", "receipt sequence review" ], "fit_examples": [ "Risk teams", "Investigators", "Enterprise AI teams", "Armilla" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "harvey", "label": "Harvey use case", "url": "/harvey/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "ramp", "label": "Ramp use case", "url": "/ramp/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" } ], "related": [ "effect-closure", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "causal path receipt causal.path causal-path digest continuous receipt path incident evidence linkage receipt sequence review risk teams investigators enterprise ai teams armilla aiuc proof surface harness proof surface harvey use case ice proof surface kodiak robotics proof surface provable machines ramp use case armilla use case this receipt attests that a named sequence of receipts forms a digest continuous chain from one origin receipt to one terminus receipt with no unreceipted gap between them, that each step's declared input digest equals the prior step's declared output digest, that the recorded times do not run backwards, and that the continuity finding was recomputed by this service rather than supplied by the caller. digest continuity is not causation. this receipt does not attest that the origin caused the terminus, that the terminus caused the claimed effect, that the claimed effect occurred at all, or that any harm was suffered by anyone, and this service never receives the description of the claimed effect. it does not attest that the chain presented is the only chain, that no parallel or intervening cause existed outside it, or that the steps chosen are the ones a court, regulator, or investigator would consider relevant. it establishes no legal liability and is not an expert opinion on causation. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "cloazk-warden", "aliases": [ "CLOAzK posture", "Warden disposition", "CLOAzK Warden Receipt" ], "canonical_name": "Cloazk Warden Posture Receipt", "canonical_type": "cloazk.warden", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['cloazk.warden']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records that a Warden evaluated a machine's posture against a named policy inside the operator's own boundary, and carries a zero knowledge style commitment to the posture rather than the underlying observations.", "does_not_prove": "It does not prove the observations existed, does not prove the Warden was honest, and does not release or attest to any image, audio, or video content.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/cloazk-warden-v1.json", "mint_route": "/mint/cloazk-warden", "verify_route": "/verify/cloazk-warden", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/cloazk-warden", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/cloazk-warden", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/cloazk-warden -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/cloazk-warden.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "prove the home robot behaved without releasing footage", "posture without content release", "zero knowledge disposition record", "privacy bounded fleet evidence", "attest behaviour, hold no frames" ], "fit_examples": [], "partner_pages": [], "related": [ "disclosure-free-replay", "jurisdictional-clearance", "safety-envelope" ], "operational": false, "state_label": "Production deployment reported", "search_text": "cloazk warden posture receipt cloazk.warden cloazk-warden cloazk posture warden disposition cloazk warden receipt prove the home robot behaved without releasing footage posture without content release zero knowledge disposition record privacy bounded fleet evidence attest behaviour, hold no frames this receipt records that a warden evaluated a machine's posture against a named policy inside the operator's own boundary, and carries a zero knowledge style commitment to the posture rather than the underlying observations. it does not prove the observations existed, does not prove the warden was honest, and does not release or attest to any image, audio, or video content. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "conduct-record", "aliases": [ "operator track record", "conduct history", "attribution outcome buckets" ], "canonical_name": "Conduct Record Receipt", "canonical_type": "conduct.record", "category": "typed_receipt_contract", "family": "risk-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['conduct.record']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer verified the supplied fault attribution receipts, counted the ones that name one keyed operator pseudonym inside a committed window, and reported those counts by outcome class with no bucket below the stated floor.", "does_not_prove": "It does not attest that the supplied set is complete, that any omitted outcome does not exist, that the operator is well or badly run, that the record predicts anything, or that any registration, pricing, or admission decision is justified by it. It discloses no operator identity, no counterparty, and no amount.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/conduct-record-v1.json", "mint_route": null, "verify_route": "/verify/conduct-record", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/conduct-record", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/conduct-record", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/conduct-record -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 57.454, "mint_p95_ms": 61.784, "verify_p50_ms": 29.35, "verify_p95_ms": 31.023, "iterations": 200, "artifact_bytes": 1828, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/conduct-record.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "agent operator track record over a committed window", "outcome buckets under a k anonymity floor", "pricing input an operator can check without disclosure", "supplied set only coverage statement" ], "fit_examples": [ "Issuers", "Insurers", "Agent operators", "Registries", "Handshake" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "fault-attribution", "mandate-crossacceptor", "portfolio-exposure", "recovery-determination" ], "operational": false, "state_label": "Production deployment reported", "search_text": "conduct record receipt conduct.record conduct-record operator track record conduct history attribution outcome buckets agent operator track record over a committed window outcome buckets under a k anonymity floor pricing input an operator can check without disclosure supplied set only coverage statement issuers insurers agent operators registries handshake american express use case aiuc proof surface mastercard use case handshake use case this receipt attests only that a named observer verified the supplied fault attribution receipts, counted the ones that name one keyed operator pseudonym inside a committed window, and reported those counts by outcome class with no bucket below the stated floor. it does not attest that the supplied set is complete, that any omitted outcome does not exist, that the operator is well or badly run, that the record predicts anything, or that any registration, pricing, or admission decision is justified by it. it discloses no operator identity, no counterparty, and no amount. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "control-replay", "aliases": [ "control replay", "control loop receipt", "actuation replay proof", "machine control receipt" ], "canonical_name": "Control Replay Receipt", "canonical_type": "control.replay", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['control.replay']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a set of signed control cycle records, an attested control software build measurement, and a disclosed set of cycle input and actuator openings satisfy the stated deterministic replay and ordering procedure over the named disputed window. A verdict of certified_build_in_control means only that, for every opened cycle, the certified build supplied to the verifier reproduced the committed actuator output digest from the committed cycle inputs, that each input commitment instant preceded its output commitment instant within the declared drift allowance, and that the cycle chain and index sequence were unbroken across the window. A verdict of replay_not_evaluated means the verifier did not hold the certified build and therefore concluded nothing whatever about whether the certified build produced the disclosed actuator commands.", "does_not_prove": "This receipt does not establish that the sensor and command inputs committed at capture time reflected physical reality, so it does not exclude spoofing, jamming, or a faulty sensor upstream of the commitment. It does not establish that the certified build was correct, safe, adequate, or fit for the conditions it encountered, and it does not establish that a certified build that was in control behaved reasonably. It does not establish that the secure element that produced the build measurement and the cycle signatures was uncompromised at or before the first cycle of the window. It does not establish that the disclosed window is the operationally relevant window, that undisclosed cycles are unremarkable, or that any actuator command caused any outcome. This receipt decides no contractual, statutory, regulatory, evidentiary, certification, airworthiness, roadworthiness, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, grounding, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/control-replay-v1.json", "mint_route": "/mint/control-replay", "verify_route": "/verify/control-replay", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/control-replay", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/control-replay", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/control-replay -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/control-replay.test.mjs" ], "integration_link": "/control-replay/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/control-replay/", "use_cases": [ "proving which build was running the control loop during a window", "recomputing sensor inputs and actuator commands from committed digests", "showing a manual takeover was disclosed rather than dropped", "refusing a replay from an uncertified build presenting a certified measurement", "opening only the disputed cycles and keeping the rest closed" ], "fit_examples": [ "Robotics and automation vendors", "Industrial operators", "Autonomous systems teams", "Machine insurers", "Safety regulators" ], "partner_pages": [ { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "lemonade", "label": "Lemonade use case", "url": "/lemonade/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" } ], "related": [ "analysis-replay", "fault-attribution", "meter-witness", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "control replay receipt control.replay control-replay control replay control loop receipt actuation replay proof machine control receipt proving which build was running the control loop during a window recomputing sensor inputs and actuator commands from committed digests showing a manual takeover was disclosed rather than dropped refusing a replay from an uncertified build presenting a certified measurement opening only the disputed cycles and keeping the rest closed robotics and automation vendors industrial operators autonomous systems teams machine insurers safety regulators kodiak robotics proof surface lemonade use case provable machines robot.com proof surface this receipt attests only that a set of signed control cycle records, an attested control software build measurement, and a disclosed set of cycle input and actuator openings satisfy the stated deterministic replay and ordering procedure over the named disputed window. a verdict of certified_build_in_control means only that, for every opened cycle, the certified build supplied to the verifier reproduced the committed actuator output digest from the committed cycle inputs, that each input commitment instant preceded its output commitment instant within the declared drift allowance, and that the cycle chain and index sequence were unbroken across the window. a verdict of replay_not_evaluated means the verifier did not hold the certified build and therefore concluded nothing whatever about whether the certified build produced the disclosed actuator commands. this receipt does not establish that the sensor and command inputs committed at capture time reflected physical reality, so it does not exclude spoofing, jamming, or a faulty sensor upstream of the commitment. it does not establish that the certified build was correct, safe, adequate, or fit for the conditions it encountered, and it does not establish that a certified build that was in control behaved reasonably. it does not establish that the secure element that produced the build measurement and the cycle signatures was uncompromised at or before the first cycle of the window. it does not establish that the disclosed window is the operationally relevant window, that undisclosed cycles are unremarkable, or that any actuator command caused any outcome. this receipt decides no contractual, statutory, regulatory, evidentiary, certification, airworthiness, roadworthiness, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, grounding, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "corpus-commitment", "aliases": [ "corpus commitment", "training corpus receipt", "dataset commitment", "training set proof" ], "canonical_name": "Corpus Commitment Receipt", "canonical_type": "corpus.commitment", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['corpus.commitment']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that one queried work, normalized under the pinned normalization schema version, is present at or absent from the position that work occupies in a sparse Merkle accumulator whose root the trainer signed before the weights commitment for the named model run, and that the disclosed witness recomputes to that root. A verdict of in_corpus means only that the item commitment for the queried work sits under the committed root. A verdict of not_in_corpus means only that the position for the queried work is empty under that same committed root. Neither verdict establishes that the committed corpus is the only data the model was trained on, that the trainer did not train on a second uncommitted corpus, that the item count is truthful about works never committed, that any work was used lawfully or unlawfully, that any licence, permission, exception, or exhaustion applies, or that the normalization schema captures every form in which a work may appear.", "does_not_prove": "It does not establish authorship, ownership, originality, or subsistence of any right in the queried work, and it says nothing about any work other than the one queried. This receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/corpus-commitment-v1.json", "mint_route": "/mint/corpus-commitment", "verify_route": "/verify/corpus-commitment", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/corpus-commitment", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/corpus-commitment", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/corpus-commitment -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/corpus-commitment.test.mjs" ], "integration_link": "/corpus-commitment/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/corpus-commitment/", "use_cases": [ "committing what went into a training run before the run starts", "answering whether a specific document was in the corpus without publishing the corpus", "showing a weights commitment was fixed before anyone asked about the data", "refusing a membership claim about a corpus that changed after the commitment", "letting an auditor check corpus scope without receiving the corpus" ], "fit_examples": [ "Model developers", "AI assurance and audit firms", "Publishers and rights holders", "Enterprise AI buyers", "Regulators reviewing training claims" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "deccan-quality-proof", "label": "Deccan quality proof", "url": "/partners/deccan-quality-proof/" }, { "key": "mercor-pipeline-integrity", "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/" }, { "key": "micro1-certified-proof", "label": "micro1 certified proof", "url": "/partners/micro1-certified-proof/" }, { "key": "surge-neutrality", "label": "Surge neutrality", "url": "/partners/surge-neutrality/" } ], "related": [ "erasure-receipt", "evar", "knowledge-timestamp", "sigr-mir" ], "operational": false, "state_label": "Production deployment reported", "search_text": "corpus commitment receipt corpus.commitment corpus-commitment corpus commitment training corpus receipt dataset commitment training set proof committing what went into a training run before the run starts answering whether a specific document was in the corpus without publishing the corpus showing a weights commitment was fixed before anyone asked about the data refusing a membership claim about a corpus that changed after the commitment letting an auditor check corpus scope without receiving the corpus model developers ai assurance and audit firms publishers and rights holders enterprise ai buyers regulators reviewing training claims aiuc proof surface cerebras proof surface deccan quality proof mercor pipeline integrity micro1 certified proof surge neutrality this receipt attests only that one queried work, normalized under the pinned normalization schema version, is present at or absent from the position that work occupies in a sparse merkle accumulator whose root the trainer signed before the weights commitment for the named model run, and that the disclosed witness recomputes to that root. a verdict of in_corpus means only that the item commitment for the queried work sits under the committed root. a verdict of not_in_corpus means only that the position for the queried work is empty under that same committed root. neither verdict establishes that the committed corpus is the only data the model was trained on, that the trainer did not train on a second uncommitted corpus, that the item count is truthful about works never committed, that any work was used lawfully or unlawfully, that any licence, permission, exception, or exhaustion applies, or that the normalization schema captures every form in which a work may appear. it does not establish authorship, ownership, originality, or subsistence of any right in the queried work, and it says nothing about any work other than the one queried. this receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "custody-handoff", "aliases": [ "Custody Handoff Receipt" ], "canonical_name": "Custody Handoff Receipt", "canonical_type": "custody.handoff", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['custody.handoff']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that two organizations each signed an independent presentation over the same artifact commitment, artifact digest, purpose class, retention policy identifier, and effective instant, that the two presentations were signed under different keys, that the recorded release and acceptance instants stand in the recorded order under their declared drift bounds, and that the recorded presentation relation, divergent field list, sequence class, chain class, verdict, and disclosure scope are exactly the values recomputed from those presentations. A verdict of custody_transferred means only that both sides presented the same terms and that acceptance was recorded after release.", "does_not_prove": "It does not attest that the artifact content is accurate, that either organization was authorized to hold the artifact, that the stated purpose is the purpose the artifact was actually used for, that no other copy moved by another route, or that the receiving side did anything with the artifact after accepting it. A verdict of custody_not_established records that the two sides did not present the same terms, and it does not establish that either side acted wrongly. This receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no fault, responsibility, liability, or remedy, and authorizes no action.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/custody-handoff-v1.json", "mint_route": "/mint/custody-handoff", "verify_route": "/verify/custody-handoff", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/custody-handoff", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/custody-handoff", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/custody-handoff -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/custody-handoff.test.mjs" ], "integration_link": "/healthcare/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/healthcare/", "use_cases": [ "two organizations signed the same terms", "release and acceptance recorded in order", "artifact moved between parties on the record", "cross organization custody evidence", "same terms under two different keys" ], "fit_examples": [], "partner_pages": [], "related": [ "disclosure-presentation", "retention-policy" ], "operational": false, "state_label": "Production deployment reported", "search_text": "custody handoff receipt custody.handoff custody-handoff custody handoff receipt two organizations signed the same terms release and acceptance recorded in order artifact moved between parties on the record cross organization custody evidence same terms under two different keys this receipt attests only that two organizations each signed an independent presentation over the same artifact commitment, artifact digest, purpose class, retention policy identifier, and effective instant, that the two presentations were signed under different keys, that the recorded release and acceptance instants stand in the recorded order under their declared drift bounds, and that the recorded presentation relation, divergent field list, sequence class, chain class, verdict, and disclosure scope are exactly the values recomputed from those presentations. a verdict of custody_transferred means only that both sides presented the same terms and that acceptance was recorded after release. it does not attest that the artifact content is accurate, that either organization was authorized to hold the artifact, that the stated purpose is the purpose the artifact was actually used for, that no other copy moved by another route, or that the receiving side did anything with the artifact after accepting it. a verdict of custody_not_established records that the two sides did not present the same terms, and it does not establish that either side acted wrongly. this receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no fault, responsibility, liability, or remedy, and authorizes no action. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "decision-provenance", "aliases": [ "Decision Provenance Binding" ], "canonical_name": "Decision Provenance Binding", "canonical_type": "decision.provenance", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['decision.provenance']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Decision Provenance Binding receipt. A value read off a document usually gets normalized, enriched, aggregated, and scored before anything is decided on it, so this receipt binds the value as read to the value the decision actually relied on, with every step in between carrying the digest it consumed, the digest it emitted, the transform that ran, and the key of the actor that ran it. The service confirms the chain links, reports the first place it breaks, and where per step value commitments are supplied it reports the step at which the value first changed.", "does_not_prove": "It does not re-execute the pipeline and does not attest that the decision was correct or lawful; steps_reexecuted_by_service is fixed to false.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/decision-provenance-v1.json", "mint_route": "/mint/decision-provenance", "verify_route": "/verify/decision-provenance", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/decision-provenance", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "decision_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "reading_attestation_ref": "", "field_path": "", "value_as_read_commitment_sha256": "<64 hex chars, sha256 of your evidence>", "steps": "", "value_as_relied_upon_commitment_sha256": "<64 hex chars, sha256 of your evidence>", "decision_record_digest_sha256": "<64 hex chars, sha256 of your evidence>", "decision_adverse": "", "decided_at": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/decision-provenance", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/decision-provenance -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"decision_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"reading_attestation_ref\": \"\", \"field_path\": \"\", \"value_as_read_commitment_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"steps\": \"\", \"value_as_relied_upon_commitment_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"decision_record_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"decision_adverse\": \"\", \"decided_at\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.739, "mint_p95_ms": 6.703, "verify_p50_ms": 1.948, "verify_p95_ms": 2.254, "iterations": 200, "artifact_bytes": 3466, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "steps_reexecuted_by_service": false, "decision_correctness_proven": false, "step_count": "integer", "step_index_contiguous": "boolean", "step_chain_linked": "boolean", "first_chain_break_step_index": "integer", "value_changed_between_read_and_reliance": "boolean", "value_first_changed_at_step_index": "integer", "human_override_step_count": "integer" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "value as read to value relied upon", "adverse action traceability", "transform chain record", "post extraction mutation", "decision input integrity" ], "fit_examples": [], "partner_pages": [], "related": [ "divergence-attestation", "tolerance-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "decision provenance binding decision.provenance decision-provenance decision provenance binding value as read to value relied upon adverse action traceability transform chain record post extraction mutation decision input integrity decision provenance binding receipt. a value read off a document usually gets normalized, enriched, aggregated, and scored before anything is decided on it, so this receipt binds the value as read to the value the decision actually relied on, with every step in between carrying the digest it consumed, the digest it emitted, the transform that ran, and the key of the actor that ran it. the service confirms the chain links, reports the first place it breaks, and where per step value commitments are supplied it reports the step at which the value first changed. it does not re-execute the pipeline and does not attest that the decision was correct or lawful; steps_reexecuted_by_service is fixed to false. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "delegation-attenuation", "aliases": [], "canonical_name": "Delegation Attenuation Receipt", "canonical_type": "delegation.attenuation", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['delegation.attenuation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that the supplied delegation links and supplied action assertion satisfy the stated mechanical attenuation comparisons at verification.", "does_not_prove": "It does not attest that the root authority is valid, that a grantor is entitled to delegate, that the supplied chain is complete or exclusive, that any linked credential is the one an acceptor uses, that an action occurs, that the action is authorized, lawful, effective, enforceable, paid, settled, or accepted, that any party has knowledge or notice, that a category name is revealed, or that any person bears responsibility, loss, harm, fault, or liability. It cannot decide whether authority exists outside the supplied chain, whether a missing link exists, whether an action is proper, or whether an external rule permits it.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/delegation-attenuation-v1.json", "mint_route": null, "verify_route": "/verify/delegation-attenuation", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/delegation-attenuation", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/delegation-attenuation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/delegation-attenuation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 6.553, "mint_p95_ms": 8.408, "verify_p50_ms": 5.543, "verify_p95_ms": 6.579, "iterations": 200, "artifact_bytes": 3108, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/delegation-attenuation.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "proving a delegated grant only narrowed", "sub delegation scope evidence", "agent to agent handoff record" ], "fit_examples": [ "Identity teams", "Platform teams", "Payment schemes", "Fireblocks", "Signifyd", "Forter" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" } ], "related": [ "admission-binding", "authority-qualification", "authority-revocation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "delegation attenuation receipt delegation.attenuation delegation-attenuation proving a delegated grant only narrowed sub delegation scope evidence agent to agent handoff record identity teams platform teams payment schemes fireblocks signifyd forter circle proof surface cisco use case equinix use case ice proof surface stripe proof surface mastercard use case revolut use case fireblocks use case signifyd use case forter use case this receipt attests only that the supplied delegation links and supplied action assertion satisfy the stated mechanical attenuation comparisons at verification. it does not attest that the root authority is valid, that a grantor is entitled to delegate, that the supplied chain is complete or exclusive, that any linked credential is the one an acceptor uses, that an action occurs, that the action is authorized, lawful, effective, enforceable, paid, settled, or accepted, that any party has knowledge or notice, that a category name is revealed, or that any person bears responsibility, loss, harm, fault, or liability. it cannot decide whether authority exists outside the supplied chain, whether a missing link exists, whether an action is proper, or whether an external rule permits it. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "determinism-class", "aliases": [ "Determinism Class Declaration" ], "canonical_name": "Determinism Class Declaration", "canonical_type": "determinism.class", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['determinism.class']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Determinism Class Declaration receipt. A pipeline declares itself deterministic, seeded stochastic, or declared nondeterministic, and the service recomputes whether that declaration is internally consistent with what else is in the body: a seeded stochastic pipeline has to carry a seed commitment, and a declared nondeterministic pipeline has to enumerate what makes it nondeterministic. A pipeline that declares itself nondeterministic gets a not replayable as declared result later on, which is a stated limit and never an adverse finding.", "does_not_prove": "It does not re-execute the pipeline; replay_executed_by_service is fixed to false.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/determinism-class-v1.json", "mint_route": "/mint/determinism-class", "verify_route": "/verify/determinism-class", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/determinism-class", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "pipeline_instance_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "determinism_class": "", "replay_window_from": "", "replay_window_to": "", "replay_environment_runtime_ref": "", "replay_environment_accelerator_class": "", "replay_environment_library_digests": "", "declaring_key_id": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/determinism-class", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/determinism-class -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"pipeline_instance_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"determinism_class\": \"\", \"replay_window_from\": \"\", \"replay_window_to\": \"\", \"replay_environment_runtime_ref\": \"\", \"replay_environment_accelerator_class\": \"\", \"replay_environment_library_digests\": \"\", \"declaring_key_id\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.629, "mint_p95_ms": 2.974, "verify_p50_ms": 1.875, "verify_p95_ms": 2.271, "iterations": 200, "artifact_bytes": 1969, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "replay_executed_by_service": false, "declaration_internally_consistent": "boolean", "nondeterminism_source_count": "integer", "replay_permitted_by_declaration": "boolean", "replay_window_ordered": "boolean", "library_digest_count": "integer" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "bit exact or stochastic pipeline", "seed commitment", "replay window declaration", "model version reproducibility", "runtime and accelerator record" ], "fit_examples": [], "partner_pages": [], "related": [ "render-profile", "stage-replay" ], "operational": false, "state_label": "Production deployment reported", "search_text": "determinism class declaration determinism.class determinism-class determinism class declaration bit exact or stochastic pipeline seed commitment replay window declaration model version reproducibility runtime and accelerator record determinism class declaration receipt. a pipeline declares itself deterministic, seeded stochastic, or declared nondeterministic, and the service recomputes whether that declaration is internally consistent with what else is in the body: a seeded stochastic pipeline has to carry a seed commitment, and a declared nondeterministic pipeline has to enumerate what makes it nondeterministic. a pipeline that declares itself nondeterministic gets a not replayable as declared result later on, which is a stated limit and never an adverse finding. it does not re-execute the pipeline; replay_executed_by_service is fixed to false. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "directory-state", "aliases": [ "directory observation", "key directory state", "jwks observation" ], "canonical_name": "Directory State Receipt", "canonical_type": "directory.state", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['directory.state']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer retrieved a named directory at a named URL at an instant placed against a declared external time reference with a declared drift bound, that the retrieved content hashed to the stated content digest, that the stated set of key identifiers was present with their stated per key commitments, and that the presence or absence of one queried key identifier was recomputed by this service from the committed content rather than supplied by the caller.", "does_not_prove": "It does not attest that the directory content is correct. It does not attest that the publisher is entitled to publish it. It does not attest that any key in it is validly issued or under the custody of any party. It does not attest that a key absent from it does not exist elsewhere. It does not attest that the observer saw the same content another observer would have seen at the same instant. It does not attest that any signature made under any key was authorised. It does not decide whether any message should have been blocked.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/directory-state-v1.json", "mint_route": null, "verify_route": "/verify/directory-state", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/directory-state", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/directory-state", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/directory-state -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 3.024, "mint_p95_ms": 6.455, "verify_p50_ms": 2.079, "verify_p95_ms": 2.514, "iterations": 200, "artifact_bytes": 3131, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/directory-state.test.mjs" ], "integration_link": "/agentic-payments/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agentic-payments/", "use_cases": [ "fixing what a key directory contained at a stated instant", "presence or absence of one queried key identifier", "observation instant placed against an external time reference", "rotated directory evidence for a signature dispute" ], "fit_examples": [ "Payment schemes", "Merchants", "Site protection providers", "Agent operators", "Forter", "Handshake" ], "partner_pages": [ { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "visa", "label": "Visa use case", "url": "/partners/visa/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "admission-binding", "authority-revocation", "knowledge-timestamp", "screening-attestation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "directory state receipt directory.state directory-state directory observation key directory state jwks observation fixing what a key directory contained at a stated instant presence or absence of one queried key identifier observation instant placed against an external time reference rotated directory evidence for a signature dispute payment schemes merchants site protection providers agent operators forter handshake cloudflare proof surface stripe proof surface mastercard use case visa use case forter use case handshake use case this receipt attests only that a named observer retrieved a named directory at a named url at an instant placed against a declared external time reference with a declared drift bound, that the retrieved content hashed to the stated content digest, that the stated set of key identifiers was present with their stated per key commitments, and that the presence or absence of one queried key identifier was recomputed by this service from the committed content rather than supplied by the caller. it does not attest that the directory content is correct. it does not attest that the publisher is entitled to publish it. it does not attest that any key in it is validly issued or under the custody of any party. it does not attest that a key absent from it does not exist elsewhere. it does not attest that the observer saw the same content another observer would have seen at the same instant. it does not attest that any signature made under any key was authorised. it does not decide whether any message should have been blocked. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "disclosure-free-replay", "aliases": [], "canonical_name": "Disclosure-Free Replay", "canonical_type": "replay.disclosurefree", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['replay.disclosurefree']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Disclosure-Free Replay typed facade receipt. Attests that a replay_id, a source_receipt_ref, and a disclosed field allowlist were recorded and signed at recorded_at, and that fields_outside_allowlist_leaked recomputes exactly from a caller supplied leaked_field_count.", "does_not_prove": "It does not itself inspect the replayed payload; a caller must independently diff the replayed fields against disclosed_field_allowlist and report the count truthfully, this receipt only records and signs that count.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/replay-disclosurefree-v1.json", "mint_route": "/mint/replay-disclosurefree", "verify_route": "/verify/replay-disclosurefree", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/replay-disclosurefree", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "replay_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "source_receipt_ref": "", "disclosed_field_allowlist": "", "leaked_field_count": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/replay-disclosurefree", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/replay-disclosurefree -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"replay_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"source_receipt_ref\": \"\", \"disclosed_field_allowlist\": \"\", \"leaked_field_count\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.522, "mint_p95_ms": 2.932, "verify_p50_ms": 1.902, "verify_p95_ms": 2.181, "iterations": 200, "artifact_bytes": 1227, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "fields_outside_allowlist_leaked": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/carnac-live-ink/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/carnac-live-ink/", "use_cases": [ "replay without exposure", "field allowlist", "PHI protection", "privileged content audit", "regulator replay" ], "fit_examples": [ "Cisco", "Snowflake", "Chime", "AIUC" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" } ], "related": [ "egress-bond", "forensic-rail", "viewkey" ], "operational": false, "state_label": "Production deployment reported", "search_text": "disclosure-free replay replay.disclosurefree disclosure-free-replay replay without exposure field allowlist phi protection privileged content audit regulator replay cisco snowflake chime aiuc cisco use case snowflake proof surface chime proof surface aiuc proof surface disclosure-free replay typed facade receipt. attests that a replay_id, a source_receipt_ref, and a disclosed field allowlist were recorded and signed at recorded_at, and that fields_outside_allowlist_leaked recomputes exactly from a caller supplied leaked_field_count. it does not itself inspect the replayed payload; a caller must independently diff the replayed fields against disclosed_field_allowlist and report the count truthfully, this receipt only records and signs that count. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "disclosure-presentation", "aliases": [ "Disclosure Presentation Receipt" ], "canonical_name": "Disclosure Presentation Receipt", "canonical_type": "disclosure.presentation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['disclosure.presentation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a notice with the recorded digest and version was recorded as presented on the recorded surface class at the recorded instant, by the committed presenting party, to the committed subject, that the recorded response class and its instant are the ones the presenting side recorded, and that the presentation instant, taken at its latest possible value under the recorded drift bound, is at or before the earliest possible instant of the linked prior receipt for the assisted action.", "does_not_prove": "It does not attest that any person read, understood, or agreed to anything, that the notice text was legally adequate, that the notice was legible or audible, that a recorded acknowledgement was freely given, or that the assisted action itself was correct. The surface class, the response channel class, and the notice version are recorded as presented and are not evaluated here.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/disclosure-presentation-v1.json", "mint_route": "/mint/disclosure-presentation", "verify_route": "/verify/disclosure-presentation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/disclosure-presentation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/disclosure-presentation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/disclosure-presentation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/disclosure-presentation.test.mjs" ], "integration_link": "/healthcare/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/healthcare/", "use_cases": [ "notice recorded as presented before an assisted action", "which notice version was shown", "response class recorded by the presenting side", "ordering of notice against the action it precedes", "surface class on the record" ], "fit_examples": [], "partner_pages": [], "related": [ "custody-handoff", "model-change" ], "operational": false, "state_label": "Production deployment reported", "search_text": "disclosure presentation receipt disclosure.presentation disclosure-presentation disclosure presentation receipt notice recorded as presented before an assisted action which notice version was shown response class recorded by the presenting side ordering of notice against the action it precedes surface class on the record this receipt attests only that a notice with the recorded digest and version was recorded as presented on the recorded surface class at the recorded instant, by the committed presenting party, to the committed subject, that the recorded response class and its instant are the ones the presenting side recorded, and that the presentation instant, taken at its latest possible value under the recorded drift bound, is at or before the earliest possible instant of the linked prior receipt for the assisted action. it does not attest that any person read, understood, or agreed to anything, that the notice text was legally adequate, that the notice was legible or audible, that a recorded acknowledgement was freely given, or that the assisted action itself was correct. the surface class, the response channel class, and the notice version are recorded as presented and are not evaluated here. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "diurnal-bond", "aliases": [], "canonical_name": "Diurnal Bond", "canonical_type": "usap.diurnal", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.diurnal']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Diurnal Bond receipt. Attests that a regime_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any on-call or paging system actually escalated an attestation threshold; oncall_paging_integration is fixed to pending_design_partner because no such integration exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-diurnal-v1.json", "mint_route": "/mint/usap-diurnal", "verify_route": "/verify/usap-diurnal", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-diurnal", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "regime_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-diurnal", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-diurnal -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"regime_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.403, "mint_p95_ms": 2.66, "verify_p50_ms": 1.844, "verify_p95_ms": 2.161, "iterations": 200, "artifact_bytes": 1025, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "oncall_paging_integration": "pending_design_partner" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/diurnal-bond/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/diurnal-bond/", "use_cases": [ "after hours escalation", "thin oversight window", "on call proof", "weekend risk" ], "fit_examples": [ "Cisco", "Harness", "Chime", "Kalshi" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" } ], "related": [ "forensic-rail", "pbs" ], "operational": false, "state_label": "Production deployment reported", "search_text": "diurnal bond usap.diurnal diurnal-bond after hours escalation thin oversight window on call proof weekend risk cisco harness chime kalshi cisco use case harness proof surface chime proof surface diurnal bond receipt. attests that a regime_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any on-call or paging system actually escalated an attestation threshold; oncall_paging_integration is fixed to pending_design_partner because no such integration exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "divergence-attestation", "aliases": [ "Reader Divergence Attestation" ], "canonical_name": "Reader Divergence Attestation", "canonical_type": "divergence.attestation", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['divergence.attestation']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Reader Divergence Attestation receipt. Several independent readers of the same document field disagree more often than a single reported value admits, so this receipt carries every reader commitment, the versioned selection rule with its declared deterministic tie break, and the commitment to the value that was reported. The service recomputes the rule digest, runs the committed rule over the committed commitments, and reports whether the value that was reported is the value the rule selects.", "does_not_prove": "It does not read the document, does not decide which reader is right, and does not attest that any reader value is correct; readers_executed_by_service is fixed to false because the service only ever sees commitments.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/divergence-attestation-v1.json", "mint_route": "/mint/divergence-attestation", "verify_route": "/verify/divergence-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/divergence-attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "attestation_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "field_name": "", "readers": "", "selection_rule": "", "reported_value_commitment_sha256": "<64 hex chars, sha256 of your evidence>", "divergence_class_enumeration_version": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/divergence-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/divergence-attestation -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"attestation_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"field_name\": \"\", \"readers\": \"\", \"selection_rule\": \"\", \"reported_value_commitment_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"divergence_class_enumeration_version\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.739, "mint_p95_ms": 3.098, "verify_p50_ms": 2.041, "verify_p95_ms": 2.272, "iterations": 200, "artifact_bytes": 3204, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "readers_executed_by_service": false, "reader_correctness_proven": false, "reader_count": "integer", "distinct_value_count": "integer", "agreement_set_size": "integer", "divergence_set_size": "integer", "rule_digest_recomputed": "string", "rule_selected_commitment_sha256": "string", "tie_broken_deterministically": "boolean", "selection_consistent_with_reported_value": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "multi engine OCR disagreement", "selection rule applied to reader outputs", "confidence scale mismatch", "extraction consensus record", "second reader check" ], "fit_examples": [], "partner_pages": [], "related": [ "binding-uncertainty", "tolerance-bond", "verdict-custody" ], "operational": false, "state_label": "Production deployment reported", "search_text": "reader divergence attestation divergence.attestation divergence-attestation reader divergence attestation multi engine ocr disagreement selection rule applied to reader outputs confidence scale mismatch extraction consensus record second reader check reader divergence attestation receipt. several independent readers of the same document field disagree more often than a single reported value admits, so this receipt carries every reader commitment, the versioned selection rule with its declared deterministic tie break, and the commitment to the value that was reported. the service recomputes the rule digest, runs the committed rule over the committed commitments, and reports whether the value that was reported is the value the rule selects. it does not read the document, does not decide which reader is right, and does not attest that any reader value is correct; readers_executed_by_service is fixed to false because the service only ever sees commitments. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "effect-closure", "aliases": [], "canonical_name": "Effect closure receipt", "canonical_type": "effect.closure", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['effect.closure']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the closure named in signed_body closes the named authorization under the stated idempotency_key with the stated status, opened_at, and closed_at.", "does_not_prove": "It does not attest that the evidence digests it names are themselves accurate, and it does not attest that the underlying effect was fit for any purpose.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/effect-closure-v1.json", "mint_route": "/mint/effect-closure", "verify_route": "/verify/effect-closure", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/effect-closure", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/effect-closure", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/effect-closure-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/effect-closure -H 'content-type: application/json' -d @canon/examples/effect-closure-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.416, "mint_p95_ms": 2.811, "verify_p50_ms": 1.934, "verify_p95_ms": 2.173, "iterations": 200, "artifact_bytes": 1154, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "action completion", "payment settlement", "tool call closure", "robot task closure", "agentic commerce", "Circle Gateway", "Gateway attestation", "crosschain USDC", "ERC-1271", "erc1271", "unified USDC balance" ], "fit_examples": [ "Circle", "FanDuel", "Kalshi", "Robot.com", "Kodiak Robotics", "Cisco" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "fanduel-proof", "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" } ], "related": [ "authority-delegation", "hive-receipt", "proof-transition" ], "operational": false, "state_label": "Production deployment reported", "search_text": "effect closure receipt effect.closure effect-closure action completion payment settlement tool call closure robot task closure agentic commerce circle gateway gateway attestation crosschain usdc erc-1271 erc1271 unified usdc balance circle fanduel kalshi robot.com kodiak robotics cisco circle proof surface fanduel proof surface kalshi proof surface robot.com proof surface kodiak robotics proof surface provable machines revolut use case this receipt attests that the closure named in signed_body closes the named authorization under the stated idempotency_key with the stated status, opened_at, and closed_at. it does not attest that the evidence digests it names are themselves accurate, and it does not attest that the underlying effect was fit for any purpose. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "effect-quiescence", "aliases": [ "quiet window", "nil report" ], "canonical_name": "Effect Quiescence Receipt", "canonical_type": "effect.quiescence", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['effect.quiescence']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named authority, a channel roster committed before the interval opened, and a set of per channel continuity anchors satisfy the stated deterministic absence procedure over the named closed interval. A verdict of quiescent means only that no effect was admitted on the committed channels within the covered interval as reported by the anchoring parties.", "does_not_prove": "It does not establish that the roster enumerates every channel through which an effect could occur, that the anchoring parties are complete, honest, or diligent, or that no effect occurred outside the committed roster, outside the covered interval, or through an unreported path. It does not establish that any authority was suspended, revoked, exhausted, dormant, or unused as a matter of contract or law, and it does not establish quiescence of intent, capability, or obligation. A verdict of effect_observed does not establish that the effect was unauthorized, wrongful, or in breach. This receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/effect-quiescence-v1.json", "mint_route": null, "verify_route": "/verify/effect-quiescence", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/effect-quiescence", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/effect-quiescence", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/effect-quiescence -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 4.644, "mint_p95_ms": 5.343, "verify_p50_ms": 3.93, "verify_p95_ms": 7.041, "iterations": 200, "artifact_bytes": 4241, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/effect-quiescence.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "proving nothing happened in a bounded window", "restricted period evidence", "change freeze attestation" ], "fit_examples": [ "Compliance teams", "Broker dealers", "Platform teams", "Fireblocks", "Armilla", "Marqeta" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "authority-qualification", "effect-closure" ], "operational": false, "state_label": "Production deployment reported", "search_text": "effect quiescence receipt effect.quiescence effect-quiescence quiet window nil report proving nothing happened in a bounded window restricted period evidence change freeze attestation compliance teams broker dealers platform teams fireblocks armilla marqeta aiuc proof surface cisco use case equinix use case ice proof surface midfirst use case netskope use case revolut use case fireblocks use case armilla use case marqeta use case this receipt attests only that a named authority, a channel roster committed before the interval opened, and a set of per channel continuity anchors satisfy the stated deterministic absence procedure over the named closed interval. a verdict of quiescent means only that no effect was admitted on the committed channels within the covered interval as reported by the anchoring parties. it does not establish that the roster enumerates every channel through which an effect could occur, that the anchoring parties are complete, honest, or diligent, or that no effect occurred outside the committed roster, outside the covered interval, or through an unreported path. it does not establish that any authority was suspended, revoked, exhausted, dormant, or unused as a matter of contract or law, and it does not establish quiescence of intent, capability, or obligation. a verdict of effect_observed does not establish that the effect was unauthorized, wrongful, or in breach. this receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "egress-bond", "aliases": [], "canonical_name": "Egress Bond", "canonical_type": "usap.egress", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.egress']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Egress Bond receipt. Attests that an egress_manifest_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any semantic classifier or egress gateway actually measured or bounded the declared volume or semantic class; semantic_classifier_integration is fixed to not_proven because no such classifier or gateway exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-egress-v1.json", "mint_route": "/mint/usap-egress", "verify_route": "/verify/usap-egress", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-egress", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "egress_manifest_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-egress", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-egress -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"egress_manifest_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.508, "mint_p95_ms": 4.956, "verify_p50_ms": 1.838, "verify_p95_ms": 2.078, "iterations": 200, "artifact_bytes": 1084, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "semantic_classifier_integration": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/egress-bond/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/egress-bond/", "use_cases": [ "data loss prevention", "egress budget", "semantic class control", "PII boundary", "warehouse export" ], "fit_examples": [ "Cisco", "Snowflake", "Cloudflare", "AIUC" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" } ], "related": [ "disclosure-free-replay", "perimeter-bond", "viewkey" ], "operational": false, "state_label": "Production deployment reported", "search_text": "egress bond usap.egress egress-bond data loss prevention egress budget semantic class control pii boundary warehouse export cisco snowflake cloudflare aiuc cisco use case snowflake proof surface cloudflare proof surface aiuc proof surface egress bond receipt. attests that an egress_manifest_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any semantic classifier or egress gateway actually measured or bounded the declared volume or semantic class; semantic_classifier_integration is fixed to not_proven because no such classifier or gateway exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "entropy-custody", "aliases": [ "entropy custody", "keystream custody", "sampling custody", "draw integrity" ], "canonical_name": "Entropy Custody Receipt", "canonical_type": "entropy.custody", "category": "typed_receipt_contract", "family": "serving-state", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['entropy.custody']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Entropy Custody record. Attests that every stochastic token in the recorded sequence was selected by locating a keystream value derived from a secret committed by the requesting party before decoding began within the cumulative interval structure of a distribution the serving process reported for that position, that the count of keystream positions consumed by the sampler was recomputed from the sampler counter and the emitted length, that the interval membership residual at each emitted position was recomputed from the reported cumulative lower bound and the consumed keystream value, and that where a keystream position was absent or already marked consumed the decoder halted without emitting a further token.", "does_not_prove": "It does not attest that the reported distribution is the true distribution of any model, does not attest the identity of the model served, does not attest that the output is correct or useful, and does not attest that the serving process ran any particular model rather than a different model capable of reporting a self consistent distribution.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/entropy-custody-v1.json", "mint_route": "/mint/entropy-custody", "verify_route": "/verify/entropy-custody", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/entropy-custody", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/entropy-custody", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/entropy-custody -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/entropy-custody.test.mjs" ], "integration_link": "/serving-state/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/serving-state/", "use_cases": [ "selecting every stochastic token from a keystream the requesting party committed first", "proving the server never held the draw it used", "recomputing the keystream positions the sampler consumed", "recomputing the interval membership residual at each emitted position", "halting the decoder rather than redrawing at a missing or consumed position" ], "fit_examples": [ "Inference providers", "Model routers", "Audit and assurance firms", "Prediction and scoring venues", "Regulated decision owners" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" } ], "related": [ "cache-epoch", "capability-exercise", "foretoken", "numeric-lineage" ], "operational": false, "state_label": "Production deployment reported", "search_text": "entropy custody receipt entropy.custody entropy-custody entropy custody keystream custody sampling custody draw integrity selecting every stochastic token from a keystream the requesting party committed first proving the server never held the draw it used recomputing the keystream positions the sampler consumed recomputing the interval membership residual at each emitted position halting the decoder rather than redrawing at a missing or consumed position inference providers model routers audit and assurance firms prediction and scoring venues regulated decision owners openrouter proof surface fireworks entropy custody record. attests that every stochastic token in the recorded sequence was selected by locating a keystream value derived from a secret committed by the requesting party before decoding began within the cumulative interval structure of a distribution the serving process reported for that position, that the count of keystream positions consumed by the sampler was recomputed from the sampler counter and the emitted length, that the interval membership residual at each emitted position was recomputed from the reported cumulative lower bound and the consumed keystream value, and that where a keystream position was absent or already marked consumed the decoder halted without emitting a further token. it does not attest that the reported distribution is the true distribution of any model, does not attest the identity of the model served, does not attest that the output is correct or useful, and does not attest that the serving process ran any particular model rather than a different model capable of reporting a self consistent distribution. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "erasure-receipt", "aliases": [ "erasure receipt", "deletion receipt", "right to erasure proof", "record removal proof" ], "canonical_name": "Erasure Receipt", "canonical_type": "erasure.receipt", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['erasure.receipt']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that one salted object identifier commitment recomputes as a member of a signed pre deletion active set root, recomputes as a non member of a post deletion root over the same disclosed witness path, carries a signed data encryption key destruction record bound to that same commitment, and carries a signed replica manifest whose per replica destruction attestations cover the replica class set recorded at ingestion, all under the stated deterministic procedure and ordering allowances.", "does_not_prove": "It does not establish that the active set enumerated every copy of the object that ever existed, that the replica manifest enumerates every replica, backup, snapshot, cache, or export that held it, or that no offline or hidden copy was taken before the deletion. It does not establish that the object was ever admitted to the active set in the first place, that the reported destruction methods rendered any storage medium unrecoverable, or that the key and replica custodians are complete, honest, or diligent. It does not establish erasure of derived data, aggregates, embeddings, logs, or backups outside the manifest, and it decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/erasure-receipt-v1.json", "mint_route": "/mint/erasure-receipt", "verify_route": "/verify/erasure-receipt", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/erasure-receipt", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/erasure-receipt", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/erasure-receipt -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/erasure-receipt.test.mjs" ], "integration_link": "/erasure-receipt/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/erasure-receipt/", "use_cases": [ "proving a record left the active set on a stated date", "showing a deletion request was honoured without republishing the deleted record", "giving a data subject something checkable instead of a promise", "refusing a deletion claim for a record still inside the active set", "carrying a deletion history an auditor can walk" ], "fit_examples": [ "Privacy and compliance teams", "Data platforms", "Healthcare and life sciences", "Consumer apps", "Regulators reviewing deletion claims" ], "partner_pages": [ { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "harvey", "label": "Harvey use case", "url": "/harvey/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" } ], "related": [ "corpus-commitment", "knowledge-timestamp", "ledger-parity" ], "operational": false, "state_label": "Production deployment reported", "search_text": "erasure receipt erasure.receipt erasure-receipt erasure receipt deletion receipt right to erasure proof record removal proof proving a record left the active set on a stated date showing a deletion request was honoured without republishing the deleted record giving a data subject something checkable instead of a promise refusing a deletion claim for a record still inside the active set carrying a deletion history an auditor can walk privacy and compliance teams data platforms healthcare and life sciences consumer apps regulators reviewing deletion claims chime proof surface harvey use case netskope use case snowflake proof surface this receipt attests only that one salted object identifier commitment recomputes as a member of a signed pre deletion active set root, recomputes as a non member of a post deletion root over the same disclosed witness path, carries a signed data encryption key destruction record bound to that same commitment, and carries a signed replica manifest whose per replica destruction attestations cover the replica class set recorded at ingestion, all under the stated deterministic procedure and ordering allowances. it does not establish that the active set enumerated every copy of the object that ever existed, that the replica manifest enumerates every replica, backup, snapshot, cache, or export that held it, or that no offline or hidden copy was taken before the deletion. it does not establish that the object was ever admitted to the active set in the first place, that the reported destruction methods rendered any storage medium unrecoverable, or that the key and replica custodians are complete, honest, or diligent. it does not establish erasure of derived data, aggregates, embeddings, logs, or backups outside the manifest, and it decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "eval-administration", "aliases": [], "canonical_name": "Evaluation Administration Receipt", "canonical_type": "eval.administration", "category": "typed_receipt_contract", "family": "evaluation", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['eval.administration']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that a named evaluation administration arrangement was recorded alongside one specific evaluation attestation, that the test set digest was committed at or before the point the subject was told what the test set contained and at or before the evaluation window opened, and that the independence class was recomputed by this service from the declared relationship and separation of duties rather than supplied by the caller. The declared relationship, the declared separation of duties, and the identity of the administrator are recorded as asserted and are not independently verified here.", "does_not_prove": "This receipt does not contain, restate, or attest to any evaluation score or result. It does not attest that the test set was appropriate, that its items were representative, that the subject did not obtain the items by another route, that the evaluation method was adequate, or that the administrator was competent. It is not an accreditation, a certification, or an audit opinion, and no standards body, regulator, or insurer currently recognises it as one.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/eval-administration-v1.json", "mint_route": "/mint/eval/administration", "verify_route": "/verify/eval-administration", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/eval/administration", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/eval-administration", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/eval-administration -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 6.343, "mint_p95_ms": 8.823, "verify_p50_ms": 3.759, "verify_p95_ms": 4.176, "iterations": 200, "artifact_bytes": 2283, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/eval-administration.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "evaluation administration record", "separation of duties record", "evaluation receipt linkage" ], "fit_examples": [ "AI service providers", "Enterprise evaluation teams", "Armilla", "Handshake" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "deccan-quality-proof", "label": "Deccan quality proof", "url": "/partners/deccan-quality-proof/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" }, { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "mercor-pipeline-integrity", "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/" }, { "key": "micro1-certified-proof", "label": "micro1 certified proof", "url": "/partners/micro1-certified-proof/" }, { "key": "surge-neutrality", "label": "Surge neutrality", "url": "/partners/surge-neutrality/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" } ], "related": [ "evar", "sigr-consensus" ], "operational": false, "state_label": "Production deployment reported", "search_text": "evaluation administration receipt eval.administration eval-administration evaluation administration record separation of duties record evaluation receipt linkage ai service providers enterprise evaluation teams armilla handshake aiuc proof surface cerebras proof surface deccan quality proof handshake use case harness proof surface mercor pipeline integrity micro1 certified proof surge neutrality armilla use case this receipt attests that a named evaluation administration arrangement was recorded alongside one specific evaluation attestation, that the test set digest was committed at or before the point the subject was told what the test set contained and at or before the evaluation window opened, and that the independence class was recomputed by this service from the declared relationship and separation of duties rather than supplied by the caller. the declared relationship, the declared separation of duties, and the identity of the administrator are recorded as asserted and are not independently verified here. this receipt does not contain, restate, or attest to any evaluation score or result. it does not attest that the test set was appropriate, that its items were representative, that the subject did not obtain the items by another route, that the evaluation method was adequate, or that the administrator was competent. it is not an accreditation, a certification, or an audit opinion, and no standards body, regulator, or insurer currently recognises it as one. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "evar", "aliases": [], "canonical_name": "EvAR", "canonical_type": "eval.attestation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['eval.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests to the integrity of the evaluation record in signed_body.", "does_not_prove": "It does not attest that the evaluated system is correct, that the evaluation method is adequate, or that any certificate or accreditation is valid. A contamination_check status of passed records that the declared check ran and returned clean, and is not proof that the dataset is free of contamination.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/evar-v1.json", "mint_route": "/mint/evar", "verify_route": "/verify/evar", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/evar", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/evar", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/evar-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/evar -H 'content-type: application/json' -d @canon/examples/evar-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.581, "mint_p95_ms": 2.894, "verify_p50_ms": 1.74, "verify_p95_ms": 1.927, "iterations": 200, "artifact_bytes": 1691, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/typed-receipts.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "model evaluation", "benchmark integrity", "eval reporting", "contamination check", "model release gate" ], "fit_examples": [ "Cerebras", "Fireworks", "OpenRouter", "Snowflake", "AIUC", "Mercor", "Surge", "micro1" ], "partner_pages": [ { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "mercor-pipeline-integrity", "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/" }, { "key": "micro1-certified-proof", "label": "micro1 certified proof", "url": "/partners/micro1-certified-proof/" }, { "key": "surge-neutrality", "label": "Surge neutrality", "url": "/partners/surge-neutrality/" }, { "key": "deccan-quality-proof", "label": "Deccan quality proof", "url": "/partners/deccan-quality-proof/" } ], "related": [ "multi-source-divergence", "sigr-consensus", "sigr-gca" ], "operational": false, "state_label": "Production deployment reported", "search_text": "evar eval.attestation evar model evaluation benchmark integrity eval reporting contamination check model release gate cerebras fireworks openrouter snowflake aiuc mercor surge micro1 cerebras proof surface aiuc proof surface snowflake proof surface fireworks mercor pipeline integrity micro1 certified proof surge neutrality deccan quality proof this receipt attests to the integrity of the evaluation record in signed_body. it does not attest that the evaluated system is correct, that the evaluation method is adequate, or that any certificate or accreditation is valid. a contamination_check status of passed records that the declared check ran and returned clean, and is not proof that the dataset is free of contamination. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "fault-attribution", "aliases": [ "loss allocation", "fault allocation" ], "canonical_name": "Fault Attribution Receipt", "canonical_type": "fault.attribution", "category": "typed_receipt_contract", "family": "risk-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['fault.attribution']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer recomputed which precommitted constraints the supplied observations violated, and which parties had made those precommitments before the loss instant.", "does_not_prove": "It does not attest that the loss occurred, that the observations are complete, that any party acted with intent, that any legal duty was breached, or that any amount is owed.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/fault-attribution-v1.json", "mint_route": null, "verify_route": "/verify/fault-attribution", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/fault-attribution", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/fault-attribution", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/fault-attribution -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 2.966, "mint_p95_ms": 3.32, "verify_p50_ms": 2.158, "verify_p95_ms": 2.479, "iterations": 200, "artifact_bytes": 1753, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/fault-attribution.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "allocating loss after an agent error", "recovery against an agent operator", "purchase protection adjudication", "precommitment precedence check" ], "fit_examples": [ "Issuers", "Insurers", "Agent operators", "Acceptors", "Fireblocks", "Armilla", "Signifyd", "Forter", "Handshake" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "authorization-decision", "causal-path", "parametric-trigger", "portfolio-exposure" ], "operational": false, "state_label": "Production deployment reported", "search_text": "fault attribution receipt fault.attribution fault-attribution loss allocation fault allocation allocating loss after an agent error recovery against an agent operator purchase protection adjudication precommitment precedence check issuers insurers agent operators acceptors fireblocks armilla signifyd forter handshake american express use case aiuc proof surface stripe proof surface worldpay use case revolut use case fireblocks use case armilla use case signifyd use case forter use case handshake use case this receipt attests only that a named observer recomputed which precommitted constraints the supplied observations violated, and which parties had made those precommitments before the loss instant. it does not attest that the loss occurred, that the observations are complete, that any party acted with intent, that any legal duty was breached, or that any amount is owed. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "forensic-rail", "aliases": [], "canonical_name": "Forensic Rail", "canonical_type": "usap.forensic", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.forensic']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Forensic Rail receipt. Attests that a credential_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any ISAC style consortium actually issued the credential, or that a deterministic inference stack actually produced the analysis; isac_consortium_integration and deterministic_inference_stack are fixed to not_proven because no such consortium or stack exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-forensic-v1.json", "mint_route": "/mint/usap-forensic", "verify_route": "/verify/usap-forensic", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-forensic", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "credential_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-forensic", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-forensic -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"credential_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.545, "mint_p95_ms": 5.049, "verify_p50_ms": 1.805, "verify_p95_ms": 2.042, "iterations": 200, "artifact_bytes": 1164, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "isac_consortium_integration": "not_proven", "deterministic_inference_stack": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/forensic-rail/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/forensic-rail/", "use_cases": [ "incident response", "consortium access", "replay under credential", "security investigation" ], "fit_examples": [ "Cisco", "Cloudflare", "AIUC", "Snowflake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" } ], "related": [ "disclosure-free-replay", "diurnal-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "forensic rail usap.forensic forensic-rail incident response consortium access replay under credential security investigation cisco cloudflare aiuc snowflake cisco use case cloudflare proof surface aiuc proof surface forensic rail receipt. attests that a credential_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any isac style consortium actually issued the credential, or that a deterministic inference stack actually produced the analysis; isac_consortium_integration and deterministic_inference_stack are fixed to not_proven because no such consortium or stack exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "foretoken", "aliases": [], "canonical_name": "Foretoken (streamed proof, sealed ending)", "canonical_type": "stream.attestation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['stream.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that pre_commitment was fixed at committed_at, before or at first_content_at, and that chain.final_chain_sha256 and chain.emitted_unit_count, when present, were computed by the signer at mint time from the caller's ordered per-unit digest evidence, folded onto pre_commitment.chain_init_sha256 under the declared algorithm, never accepted as caller-declared values, sealed at termination.sealed_at under the declared termination.kind.", "does_not_prove": "It does not read, judge, or attest to the quality of the streamed content, it does not require a trusted execution environment, and it cannot be produced after the fact against content that already existed, because the pre_commitment necessarily predates the content it covers. This receipt alone does not let an independent verifier replay the fold, because the per-unit evidence is never stored in it; a party later given the same ordered per-unit digest list by the producer's own records can independently recompute the fold against chain.evidence_sha256 and chain.final_chain_sha256, and a truncated, extended, edited, or reordered unit list will not reproduce either value. A run with a pre_commitment and no terminal attestation is not silent by design; the absence itself indicates the stream never reached a sealed ending.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/stream-attestation-v1.json", "mint_route": "/mint/stream-attestation", "verify_route": "/verify/stream-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/stream-attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/stream-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/stream-attestation-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/stream-attestation -H 'content-type: application/json' -d @canon/examples/stream-attestation-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.584, "mint_p95_ms": 5.759, "verify_p50_ms": 1.806, "verify_p95_ms": 2.215, "iterations": 200, "artifact_bytes": 2496, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments-2.test.mjs", "test/deployment.test.mjs" ], "integration_link": "/foretoken/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/foretoken/", "use_cases": [ "streaming inference", "token stream proof", "voice stream", "live transcription", "real time inference" ], "fit_examples": [ "Cerebras", "Fireworks", "Cartesia", "Fish Audio", "Cisco" ], "partner_pages": [ { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-canon-matching", "label": "Cerebras canon matching", "url": "/partners/cerebras-canon-matching/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cartesia-proof", "label": "Cartesia proof surface", "url": "/partners/cartesia-proof/" }, { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" } ], "related": [ "afir-stream", "sigr-cachesign" ], "operational": false, "state_label": "Production deployment reported", "search_text": "foretoken (streamed proof, sealed ending) stream.attestation foretoken streaming inference token stream proof voice stream live transcription real time inference cerebras fireworks cartesia fish audio cisco cerebras proof surface cerebras canon matching cerebras technical companion fireworks cartesia proof surface fish audio proof surface this receipt attests that pre_commitment was fixed at committed_at, before or at first_content_at, and that chain.final_chain_sha256 and chain.emitted_unit_count, when present, were computed by the signer at mint time from the caller's ordered per-unit digest evidence, folded onto pre_commitment.chain_init_sha256 under the declared algorithm, never accepted as caller-declared values, sealed at termination.sealed_at under the declared termination.kind. it does not read, judge, or attest to the quality of the streamed content, it does not require a trusted execution environment, and it cannot be produced after the fact against content that already existed, because the pre_commitment necessarily predates the content it covers. this receipt alone does not let an independent verifier replay the fold, because the per-unit evidence is never stored in it; a party later given the same ordered per-unit digest list by the producer's own records can independently recompute the fold against chain.evidence_sha256 and chain.final_chain_sha256, and a truncated, extended, edited, or reordered unit list will not reproduce either value. a run with a pre_commitment and no terminal attestation is not silent by design; the absence itself indicates the stream never reached a sealed ending. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hivebound-envelope", "aliases": [], "canonical_name": "HiveBound Envelope (typed facade)", "canonical_type": "hivebound.envelope", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['hivebound.envelope']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": "The inspected record does not contain an attributable Canon 46 report or reviewer provenance. Do not attribute this route warning to an independent review. Verify the current route and the published schema directly before relying on this row.", "proves": "HiveBound Envelope typed facade receipt. Attests that a binding_id, a bound_entity_ref, and a caller held binding-policy evidence digest were recorded and signed at recorded_at, and that binding_conformant recomputes exactly from a caller supplied policy_digest_match flag.", "does_not_prove": "It does not itself re-implement HiveBound pre-commitment envelope validation; the original hivebound envelope schema and its own POST /verify route remain the authority for that shape, this typed contract is a canonical-registry facade over the same binding concept for the unified typed-receipts API.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/hivebound-envelope-v1.json", "mint_route": "/mint/hivebound-envelope", "verify_route": "/verify/hivebound-envelope", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/hivebound-envelope", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "binding_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "bound_entity_ref": "", "policy_digest_match": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/hivebound-envelope", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/hivebound-envelope -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"binding_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"bound_entity_ref\": \"\", \"policy_digest_match\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.615, "mint_p95_ms": 5.533, "verify_p50_ms": 1.739, "verify_p95_ms": 1.964, "iterations": 200, "artifact_bytes": 1241, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "binding_conformant": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/hivebound/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/hivebound/", "use_cases": [ "input pre commitment", "declared intent", "bonded capital", "signed envelope before inference", "ERC-1271", "erc1271", "Circle Gateway", "smart wallet", "crosschain USDC", "unified USDC balance" ], "fit_examples": [ "Fireworks", "OpenRouter", "Circle", "Cisco" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "carnac", "stipryn" ], "operational": false, "state_label": "Production deployment reported", "search_text": "hivebound envelope (typed facade) hivebound.envelope hivebound-envelope input pre commitment declared intent bonded capital signed envelope before inference erc-1271 erc1271 circle gateway smart wallet crosschain usdc unified usdc balance fireworks openrouter circle cisco circle proof surface fireworks openrouter proof surface stripe proof surface hivebound envelope typed facade receipt. attests that a binding_id, a bound_entity_ref, and a caller held binding-policy evidence digest were recorded and signed at recorded_at, and that binding_conformant recomputes exactly from a caller supplied policy_digest_match flag. it does not itself re-implement hivebound pre-commitment envelope validation; the original hivebound envelope schema and its own post /verify route remain the authority for that shape, this typed contract is a canonical-registry facade over the same binding concept for the unified typed-receipts api. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hiveseal-qpuf", "aliases": [], "canonical_name": "HiveSeal QPuF", "canonical_type": "hiveseal.qpuf", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['hiveseal.qpuf']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "HiveSeal Quantum Physically Unclonable Function receipt. Attests that a puf_challenge_id and a caller held challenge-response digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that any physical hardware root of trust exists; qrng_source_kind and puf_source_kind are fixed to simulated because this deployment holds no physical PUF or quantum random number generator, and that must never silently become hardware.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/hiveseal-qpuf-v1.json", "mint_route": "/mint/hiveseal-qpuf", "verify_route": "/verify/hiveseal-qpuf", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/hiveseal-qpuf", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "puf_challenge_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/hiveseal-qpuf", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/hiveseal-qpuf -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"puf_challenge_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.532, "mint_p95_ms": 2.914, "verify_p50_ms": 1.751, "verify_p95_ms": 2.047, "iterations": 200, "artifact_bytes": 1070, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "qrng_source_kind": "simulated", "puf_source_kind": "simulated" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/hiveseal/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/hiveseal/", "use_cases": [ "hardware root of trust", "device signing", "PUF", "QRNG", "offline signing device" ], "fit_examples": [ "Cisco", "Kodiak Robotics", "Robot.com", "ICE" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" } ], "related": [ "ppr", "s2s" ], "operational": false, "state_label": "Production deployment reported", "search_text": "hiveseal qpuf hiveseal.qpuf hiveseal-qpuf hardware root of trust device signing puf qrng offline signing device cisco kodiak robotics robot.com ice cisco use case kodiak robotics proof surface robot.com proof surface hiveseal quantum physically unclonable function receipt. attests that a puf_challenge_id and a caller held challenge-response digest were recorded and signed at recorded_at. it does not attest that any physical hardware root of trust exists; qrng_source_kind and puf_source_kind are fixed to simulated because this deployment holds no physical puf or quantum random number generator, and that must never silently become hardware. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "howler-sae", "aliases": [ "howler" ], "canonical_name": "Howler", "canonical_type": "usap.howler", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.howler']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Howler receipt. Attests that a probe_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that a sparse autoencoder probe was actually wired into a live reasoning loop, or that any drift, capability, or contamination signal was actually detected; sae_wired_to_live_reasoning_loop is fixed to false because no design partner run exists yet.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-howler-v1.json", "mint_route": "/mint/usap-howler", "verify_route": "/verify/usap-howler", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-howler", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "probe_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-howler", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-howler -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"probe_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.374, "mint_p95_ms": 2.714, "verify_p50_ms": 1.725, "verify_p95_ms": 2.013, "iterations": 200, "artifact_bytes": 1057, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "sae_wired_to_live_reasoning_loop": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/howler/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/howler/", "use_cases": [ "drift probe", "capability probe", "contamination signal", "sparse autoencoder" ], "fit_examples": [ "AIUC", "Cerebras", "Fireworks", "Cisco" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" } ], "related": [ "refusal-ledger", "sigr-gitm" ], "operational": false, "state_label": "Production deployment reported", "search_text": "howler usap.howler howler-sae howler drift probe capability probe contamination signal sparse autoencoder aiuc cerebras fireworks cisco aiuc proof surface cerebras proof surface howler receipt. attests that a probe_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that a sparse autoencoder probe was actually wired into a live reasoning loop, or that any drift, capability, or contamination signal was actually detected; sae_wired_to_live_reasoning_loop is fixed to false because no design partner run exists yet. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hvvs", "aliases": [], "canonical_name": "Hive Verifiable Voting System", "canonical_type": "voting.verifiable", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['voting.verifiable']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Hive Verifiable Voting System receipt. Attests that a ballot_id, an election_ref, and a caller held vote-commitment digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that any operational voting or election-verification system exists; system_operational is fixed to false because no such system is built or deployed, and no election authority endorsement is claimed.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/voting-verifiable-v1.json", "mint_route": "/mint/voting-verifiable", "verify_route": "/verify/voting-verifiable", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/voting-verifiable", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "ballot_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "election_ref": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/voting-verifiable", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/voting-verifiable -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"ballot_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"election_ref\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.457, "mint_p95_ms": 2.856, "verify_p50_ms": 1.794, "verify_p95_ms": 2.202, "iterations": 200, "artifact_bytes": 1017, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "system_operational": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/voting/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/voting/", "use_cases": [ "election audit", "ballot workflow", "verifiable tally", "public trust audit" ], "fit_examples": [ "ICE" ], "partner_pages": [], "related": [ "hahs", "sovereign-receipt-registry" ], "operational": false, "state_label": "Production deployment reported", "search_text": "hive verifiable voting system voting.verifiable hvvs election audit ballot workflow verifiable tally public trust audit ice hive verifiable voting system receipt. attests that a ballot_id, an election_ref, and a caller held vote-commitment digest were recorded and signed at recorded_at. it does not attest that any operational voting or election-verification system exists; system_operational is fixed to false because no such system is built or deployed, and no election authority endorsement is claimed. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "imprimatur", "aliases": [], "canonical_name": "Imprimatur (pre-attestation clearance primitive)", "canonical_type": "imprimatur.clearance", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['imprimatur.clearance']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the four named pre-conditions in signed_body were evaluated and combined exactly as recorded, that precond_root recomputes from those four leaves, that outcome was computed from the leaves rather than supplied by the caller, and that the clearance was read at or before expires_at.", "does_not_prove": "It does not attest that any pre-condition's underlying evidence digest is itself accurate, does not assert that the cleared inference is lawful, and does not attest that any inference which follows actually ran as cleared. A separate Hive receipt for the executed inference is required to check whether the executed model matched request_ref.model_ref.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/imprimatur-clearance-v1.json", "mint_route": "/mint/imprimatur-clearance", "verify_route": "/verify/imprimatur-clearance", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/imprimatur-clearance", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/imprimatur-clearance", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/imprimatur-clearance-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/imprimatur-clearance -H 'content-type: application/json' -d @canon/examples/imprimatur-clearance-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.685, "mint_p95_ms": 3.175, "verify_p50_ms": 2.084, "verify_p95_ms": 2.306, "iterations": 200, "artifact_bytes": 2052, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-imprimatur.test.mjs" ], "integration_link": "/imprimatur/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/imprimatur/", "use_cases": [ "pre action clearance", "four gate check", "release gate", "publication clearance", "ERC-1271", "erc1271", "Circle Gateway", "smart contract authorization", "policy decision" ], "fit_examples": [ "AIUC", "Cisco", "ICE", "Snowflake", "Circle" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "refusal-ledger", "stipryn" ], "operational": false, "state_label": "Production deployment reported", "search_text": "imprimatur (pre-attestation clearance primitive) imprimatur.clearance imprimatur pre action clearance four gate check release gate publication clearance erc-1271 erc1271 circle gateway smart contract authorization policy decision aiuc cisco ice snowflake circle aiuc proof surface circle proof surface cisco use case stripe proof surface this receipt attests that the four named pre-conditions in signed_body were evaluated and combined exactly as recorded, that precond_root recomputes from those four leaves, that outcome was computed from the leaves rather than supplied by the caller, and that the clearance was read at or before expires_at. it does not attest that any pre-condition's underlying evidence digest is itself accurate, does not assert that the cleared inference is lawful, and does not attest that any inference which follows actually ran as cleared. a separate hive receipt for the executed inference is required to check whether the executed model matched request_ref.model_ref. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "inkframe-non-mutation", "aliases": [], "canonical_name": "InkFrame Non-Mutation", "canonical_type": "inkframe.nonmutation", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['inkframe.nonmutation']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "InkFrame Non-Mutation typed facade receipt. Attests that a frame_id, a pre-state digest, and a post-state digest were recorded and signed at recorded_at, and that mutated recomputes exactly as false only when the two digests are equal; any digest mismatch fails this receipt rather than being silently accepted. This is a thin unified-API facade over the InkFrame verb family hosted externally under Hive Receipt;", "does_not_prove": "it does not independently reach or depend on that external host, and mutated_externally_confirmed stays false because no cross-check against the external InkFrame service occurred.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/inkframe-nonmutation-v1.json", "mint_route": "/mint/inkframe-nonmutation", "verify_route": "/verify/inkframe-nonmutation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/inkframe-nonmutation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "frame_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "pre_state_sha256": "<64 hex chars, sha256 of your evidence>", "post_state_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/inkframe-nonmutation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/inkframe-nonmutation -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"frame_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"pre_state_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"post_state_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.495, "mint_p95_ms": 2.906, "verify_p50_ms": 1.917, "verify_p95_ms": 4.208, "iterations": 200, "artifact_bytes": 1398, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "mutated": "boolean", "mutated_externally_confirmed": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/carnac-live-ink/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/carnac-live-ink/", "use_cases": [ "non mutation proof", "content addressed envelope", "tamper evidence", "byte level integrity" ], "fit_examples": [ "Circle", "Cisco", "Postman", "Snowflake" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" } ], "related": [ "disclosure-free-replay", "inkframe-v1" ], "operational": false, "state_label": "Production deployment reported", "search_text": "inkframe non-mutation inkframe.nonmutation inkframe-non-mutation non mutation proof content addressed envelope tamper evidence byte level integrity circle cisco postman snowflake circle proof surface postman proof surface inkframe non-mutation typed facade receipt. attests that a frame_id, a pre-state digest, and a post-state digest were recorded and signed at recorded_at, and that mutated recomputes exactly as false only when the two digests are equal; any digest mismatch fails this receipt rather than being silently accepted. this is a thin unified-api facade over the inkframe verb family hosted externally under hive receipt; it does not independently reach or depend on that external host, and mutated_externally_confirmed stays false because no cross-check against the external inkframe service occurred. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "intent-affirmation", "aliases": [ "affirmation bracket", "presented and transmitted artifact equality", "authenticated intent affirmation" ], "canonical_name": "Intent Affirmation Receipt", "canonical_type": "intent.affirmation", "category": "typed_receipt_contract", "family": "authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['intent.affirmation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that the digest of the artifact presented for affirmation equals the digest of the artifact transmitted as the authenticated intent, and that the affirmation instant falls strictly between the presentation instant and the transmission instant, with all three instants placed against a declared external time reference and drift bound.", "does_not_prove": "It does not attest that a human was present, that anyone read, understood, or agreed to anything, that the presented summary is a faithful summary of what any person said, that the affirmation was freely given, or that the presented artifact was rendered legibly. The channel and the time reference are recorded as declared and are not verified here.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/intent-affirmation-v1.json", "mint_route": null, "verify_route": "/verify/intent-affirmation", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/intent-affirmation", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/intent-affirmation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/intent-affirmation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 2.681, "mint_p95_ms": 3.106, "verify_p50_ms": 1.941, "verify_p95_ms": 2.21, "iterations": 200, "artifact_bytes": 2133, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/intent-affirmation.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "binding the summary affirmed to the summary transmitted", "affirmation bracketed between presentation and transmission", "Card Member authenticated purchase intent", "external time reference and drift bound on three instants" ], "fit_examples": [ "Issuers", "Agent operators", "Voice platforms", "Program managers", "Signifyd", "Forter" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" } ], "related": [ "authority-delegation", "intent-verifiability", "mandate-conformance", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "intent affirmation receipt intent.affirmation intent-affirmation affirmation bracket presented and transmitted artifact equality authenticated intent affirmation binding the summary affirmed to the summary transmitted affirmation bracketed between presentation and transmission card member authenticated purchase intent external time reference and drift bound on three instants issuers agent operators voice platforms program managers signifyd forter american express use case stripe proof surface worldpay use case signifyd use case forter use case this receipt attests only that the digest of the artifact presented for affirmation equals the digest of the artifact transmitted as the authenticated intent, and that the affirmation instant falls strictly between the presentation instant and the transmission instant, with all three instants placed against a declared external time reference and drift bound. it does not attest that a human was present, that anyone read, understood, or agreed to anything, that the presented summary is a faithful summary of what any person said, that the affirmation was freely given, or that the presented artifact was rendered legibly. the channel and the time reference are recorded as declared and are not verified here. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "intent-verifiability", "aliases": [ "verifiability class", "checkable intent", "subjective intent exclusion" ], "canonical_name": "Intent Verifiability Receipt", "canonical_type": "intent.verifiability", "category": "typed_receipt_contract", "family": "risk-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['intent.verifiability']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer recomputed a verifiability class from the declared predicate kinds of one committed intent, against a classification ruleset whose digest was committed at or before the intent was fixed.", "does_not_prove": "It does not attest that the intent was reasonable, that the Card Member understood it, that the declared predicate kinds are complete or honestly declared, that the predicates are the ones a court or regulator would consider material, that any claim is payable or deniable, or that any party is entitled to rely on the class. This service does not read the intent text and never receives it.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/intent-verifiability-v1.json", "mint_route": null, "verify_route": "/verify/intent-verifiability", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/intent-verifiability", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/intent-verifiability", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/intent-verifiability -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 2.931, "mint_p95_ms": 5.446, "verify_p50_ms": 2.036, "verify_p95_ms": 2.388, "iterations": 200, "artifact_bytes": 1929, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/intent-verifiability.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "classifying an intent as machine checkable before any transaction", "purchase protection subjective intent exclusion", "precommitted classification ruleset precedence", "denial reason a Card Member or operator can recheck" ], "fit_examples": [ "Issuers", "Card networks", "Agent operators", "Insurers", "Signifyd", "Forter", "Handshake" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "fault-attribution", "intent-affirmation", "mandate-conformance", "screening-attestation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "intent verifiability receipt intent.verifiability intent-verifiability verifiability class checkable intent subjective intent exclusion classifying an intent as machine checkable before any transaction purchase protection subjective intent exclusion precommitted classification ruleset precedence denial reason a card member or operator can recheck issuers card networks agent operators insurers signifyd forter handshake american express use case stripe proof surface mastercard use case worldpay use case revolut use case signifyd use case forter use case handshake use case this receipt attests only that a named observer recomputed a verifiability class from the declared predicate kinds of one committed intent, against a classification ruleset whose digest was committed at or before the intent was fixed. it does not attest that the intent was reasonable, that the card member understood it, that the declared predicate kinds are complete or honestly declared, that the predicates are the ones a court or regulator would consider material, that any claim is payable or deniable, or that any party is entitled to rely on the class. this service does not read the intent text and never receives it. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "jurisdictional-clearance", "aliases": [ "Jurisdictional Clearance", "Jurisdictional Clearance Receipt" ], "canonical_name": "Jurisdictional Clearance Receipt", "canonical_type": "jurisdictional.clearance", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['jurisdictional.clearance']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records which named rule set a machine was operating under at a stated place and time, and whether the machine's declared configuration satisfied the constraints that rule set carries in this service's rule registry.", "does_not_prove": "It does not constitute a legal opinion, does not prove the rule registry is current or complete, and does not prove any regulator accepts this mapping.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/jurisdictional-clearance-v1.json", "mint_route": "/mint/jurisdictional-clearance", "verify_route": "/verify/jurisdictional-clearance", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/jurisdictional-clearance", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/jurisdictional-clearance", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/jurisdictional-clearance -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/jurisdictional-clearance.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "same fleet into the EU and Texas and Japan", "which rule set applied to this unit", "named constraint evidence per region", "cross border deployment record", "rule set resolution proof" ], "fit_examples": [], "partner_pages": [], "related": [ "agent-metamorphosis", "cloazk-warden", "sls-metering" ], "operational": false, "state_label": "Production deployment reported", "search_text": "jurisdictional clearance receipt jurisdictional.clearance jurisdictional-clearance jurisdictional clearance jurisdictional clearance receipt same fleet into the eu and texas and japan which rule set applied to this unit named constraint evidence per region cross border deployment record rule set resolution proof this receipt records which named rule set a machine was operating under at a stated place and time, and whether the machine's declared configuration satisfied the constraints that rule set carries in this service's rule registry. it does not constitute a legal opinion, does not prove the rule registry is current or complete, and does not prove any regulator accepts this mapping. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "knowledge-timestamp", "aliases": [], "canonical_name": "Knowledge Timestamp Receipt", "canonical_type": "knowledge.timestamp", "category": "typed_receipt_contract", "family": "incident-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['knowledge.timestamp']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named detecting system, running a digest pinned software build and a digest pinned rule version, committed the digest of a detection artifact at an instant supplied by a named external time anchor with a declared drift bound, at a stated position in a named append only hash chained sequence, with no human approval in its mint path. It bounds the latest instant at which that system can later be said to have first held the committed artifact, and", "does_not_prove": "it does not establish the earliest such instant. It does not attest that the detection was correct, that the committed artifact described a real condition, or that any condition existed at all, and it does not decide whether any response was reasonable, timely, adequate, or complete. It does not decide whether any materiality, significance, or de minimis assessment was right, it makes no such assessment, and it does not determine that any reporting obligation applies, that any deadline was met or missed, or that any rule, regulation, contract, or duty was complied with or breached. It does not identify any affected system, person, account, or asset, it does not disclose the content of the committed artifact, it does not authorise, require, or excuse any notification, escalation, disclosure, remediation, or enforcement action, and it fixes the timeline to which those judgments are applied and nothing more.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/knowledge-timestamp-v1.json", "mint_route": "/mint/knowledge/timestamp", "verify_route": "/verify/knowledge-timestamp", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/knowledge/timestamp", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/knowledge-timestamp", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/knowledge-timestamp -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.709, "mint_p95_ms": 5.662, "verify_p50_ms": 2.122, "verify_p95_ms": 2.55, "iterations": 200, "artifact_bytes": 3401, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/knowledge-timestamp.test.mjs" ], "integration_link": "/knowledge-timestamp/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/knowledge-timestamp/", "use_cases": [ "bounded latest instant of machine knowledge", "autonomous detection record", "disclosure clock evidence" ], "fit_examples": [ "Security teams", "Regulated issuers", "Incident response teams", "Handshake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "draftkings-proof", "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/" }, { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "causal-path", "sequence-attestation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "knowledge timestamp receipt knowledge.timestamp knowledge-timestamp bounded latest instant of machine knowledge autonomous detection record disclosure clock evidence security teams regulated issuers incident response teams handshake cisco use case draftkings proof surface equinix use case fanatics proof surface harness proof surface ice proof surface netskope use case robinhood proof surface handshake use case this receipt attests only that a named detecting system, running a digest pinned software build and a digest pinned rule version, committed the digest of a detection artifact at an instant supplied by a named external time anchor with a declared drift bound, at a stated position in a named append only hash chained sequence, with no human approval in its mint path. it bounds the latest instant at which that system can later be said to have first held the committed artifact, and it does not establish the earliest such instant. it does not attest that the detection was correct, that the committed artifact described a real condition, or that any condition existed at all, and it does not decide whether any response was reasonable, timely, adequate, or complete. it does not decide whether any materiality, significance, or de minimis assessment was right, it makes no such assessment, and it does not determine that any reporting obligation applies, that any deadline was met or missed, or that any rule, regulation, contract, or duty was complied with or breached. it does not identify any affected system, person, account, or asset, it does not disclose the content of the committed artifact, it does not authorise, require, or excuse any notification, escalation, disclosure, remediation, or enforcement action, and it fixes the timeline to which those judgments are applied and nothing more. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "ledger-parity", "aliases": [], "canonical_name": "Ledger Parity Receipt", "canonical_type": "ledger.parity", "category": "typed_receipt_contract", "family": "settlement-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['ledger.parity']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that two named records, each observed at a named cursor and at a named instant, and each committed by a distinct registered attestor key to a keyed digest computed over the same declared list of fields, produced the comparison outcome that this service recomputed from those two committed digests and those two instants against the declared window tolerance.", "does_not_prove": "It does not disclose any position, balance, holder identity, or account identifier. It does not attest that either committed digest is a correct digest of the record it names, because confirming that requires read access which this receipt does not confer. It does not decide which record is correct when the two records diverge, assigns no fault to either operator, does not decide whether the underlying settlement, transfer, or register update was proper, and does not effect or reverse any settlement. A window_exceeded outcome records only that the two observations were too far apart for the comparison to be decisive.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/ledger-parity-v1.json", "mint_route": "/mint/ledger/parity", "verify_route": "/verify/ledger-parity", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/ledger/parity", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/ledger-parity", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/ledger-parity -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 7.353, "mint_p95_ms": 8.476, "verify_p50_ms": 5.294, "verify_p95_ms": 6.087, "iterations": 200, "artifact_bytes": 3299, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/ledger-parity.test.mjs" ], "integration_link": "/ledger-parity/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/ledger-parity/", "use_cases": [ "two record parity without disclosing either", "settlement break evidence", "independent break attestation" ], "fit_examples": [ "Exchanges", "Transfer agents", "Custodians", "Banks", "Fireblocks", "Marqeta" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "kodiak-solutions", "label": "Kodiak Solutions use case", "url": "/kodiak/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "ondo", "label": "Ondo use case", "url": "/ondo/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "six-configurator", "label": "SIX configurator", "url": "/six/configurator/" }, { "key": "snowflake", "label": "Snowflake use case", "url": "/snowflake/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "mandate-aggregate", "sequence-attestation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "ledger parity receipt ledger.parity ledger-parity two record parity without disclosing either settlement break evidence independent break attestation exchanges transfer agents custodians banks fireblocks marqeta circle proof surface ice proof surface kodiak solutions use case midfirst use case ondo use case robinhood proof surface six configurator snowflake use case snowflake proof surface mastercard use case worldpay use case revolut use case fireblocks use case marqeta use case this receipt attests that two named records, each observed at a named cursor and at a named instant, and each committed by a distinct registered attestor key to a keyed digest computed over the same declared list of fields, produced the comparison outcome that this service recomputed from those two committed digests and those two instants against the declared window tolerance. it does not disclose any position, balance, holder identity, or account identifier. it does not attest that either committed digest is a correct digest of the record it names, because confirming that requires read access which this receipt does not confer. it does not decide which record is correct when the two records diverge, assigns no fault to either operator, does not decide whether the underlying settlement, transfer, or register update was proper, and does not effect or reverse any settlement. a window_exceeded outcome records only that the two observations were too far apart for the comparison to be decisive. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mandate-aggregate", "aliases": [], "canonical_name": "Cumulative Mandate Receipt", "canonical_type": "mandate.aggregate", "category": "typed_receipt_contract", "family": "authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['mandate.aggregate']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the supplied set of mandate conformance receipts all reference the same delegated authority, all fall inside the stated window, share one currency, contain no duplicate, and that their cumulative total and count were recomputed by this service in integer minor units and compared against the stated cumulative constraint.", "does_not_prove": "This service cannot know whether the supplied set is complete. A transaction that was never presented here does not appear in these totals, so a within cumulative outcome is a statement about the receipts supplied and not a statement about everything the mandate holder spent. It performs no currency conversion, is not a payment authorisation, shifts no liability under any card network rule, and does not limit any right a consumer holds under Regulation E, Regulation Z, or any equivalent rule.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/mandate-aggregate-v1.json", "mint_route": "/mint/mandate/aggregate", "verify_route": "/verify/mandate-aggregate", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/mandate/aggregate", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/mandate-aggregate", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/mandate-aggregate -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 6.624, "mint_p95_ms": 7.643, "verify_p50_ms": 6.078, "verify_p95_ms": 6.959, "iterations": 200, "artifact_bytes": 2043, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/mandate-aggregate.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "cumulative mandate record", "supplied receipt total", "delegated authority aggregation" ], "fit_examples": [ "Banks", "Card issuers", "Agentic commerce platforms", "Marqeta" ], "partner_pages": [ { "key": "bitgo", "label": "BitGo use case", "url": "/bitgo/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "authority-delegation", "mandate-conformance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "cumulative mandate receipt mandate.aggregate mandate-aggregate cumulative mandate record supplied receipt total delegated authority aggregation banks card issuers agentic commerce platforms marqeta bitgo use case chime proof surface circle proof surface ice proof surface robinhood proof surface stripe proof surface marqeta use case this receipt attests that the supplied set of mandate conformance receipts all reference the same delegated authority, all fall inside the stated window, share one currency, contain no duplicate, and that their cumulative total and count were recomputed by this service in integer minor units and compared against the stated cumulative constraint. this service cannot know whether the supplied set is complete. a transaction that was never presented here does not appear in these totals, so a within cumulative outcome is a statement about the receipts supplied and not a statement about everything the mandate holder spent. it performs no currency conversion, is not a payment authorisation, shifts no liability under any card network rule, and does not limit any right a consumer holds under regulation e, regulation z, or any equivalent rule. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mandate-conformance", "aliases": [], "canonical_name": "Mandate Conformance Receipt", "canonical_type": "mandate.conformance", "category": "typed_receipt_contract", "family": "authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['mandate.conformance']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the named transaction's amount, currency, timing and scope were compared against the constraints of one specific delegated authority receipt that was signed before the transaction was authorised, and that the outcome was recomputed by this service from that comparison rather than supplied by the caller.", "does_not_prove": "It does not attest that the cardholder granted the delegation, that the declared agent identity is genuine, that the transaction was authorised or settled by any network, that goods or services were delivered, or that the displayed terms digest corresponds to anything a person actually read. It is not a payment authorisation and carries no cardholder credential. No card network, issuer, or regulator currently recognises this receipt as authentication data, as compelling evidence, or as a liability shift, and it does not create one. It does not deny, resolve, adjudicate or affect any dispute, and it does not limit any right a consumer holds under Regulation E, Regulation Z, or any equivalent rule. This receipt evaluates one transaction against a per transaction constraint and does not evaluate cumulative spend, transaction velocity, or any aggregate limit across multiple transactions under the same mandate, so a series of individually conforming transactions may still exceed a spending intent this receipt cannot see. It evaluates the delegated authority receipt as supplied and inherits that receipt's revocation limitation, so it does not attest that the mandate was still unrevoked at the moment the transaction was authorised.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/mandate-conformance-v1.json", "mint_route": "/mint/mandate/conformance", "verify_route": "/verify/mandate-conformance", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/mandate/conformance", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/mandate-conformance", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/mandate-conformance -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 6.509, "mint_p95_ms": 7.32, "verify_p50_ms": 4.011, "verify_p95_ms": 6.952, "iterations": 200, "artifact_bytes": 2980, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/parametric-and-mandate.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "agent mandate check", "transaction constraint comparison", "delegated payment evidence", "authority timing verification" ], "fit_examples": [ "Banks", "Card issuers", "Agentic commerce platforms", "Fireblocks", "Armilla", "Signifyd", "Marqeta" ], "partner_pages": [ { "key": "bitgo", "label": "BitGo use case", "url": "/bitgo/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "okx", "label": "OKX use case", "url": "/okx/" }, { "key": "ramp", "label": "Ramp use case", "url": "/ramp/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "visa", "label": "Visa use case", "url": "/partners/visa/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "fireblocks", "label": "Fireblocks use case", "url": "/partners/fireblocks/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "authority-delegation", "effect-closure" ], "operational": false, "state_label": "Production deployment reported", "search_text": "mandate conformance receipt mandate.conformance mandate-conformance agent mandate check transaction constraint comparison delegated payment evidence authority timing verification banks card issuers agentic commerce platforms fireblocks armilla signifyd marqeta bitgo use case chime proof surface circle proof surface midfirst use case okx use case ramp use case robinhood proof surface stripe proof surface mastercard use case worldpay use case visa use case revolut use case fireblocks use case armilla use case signifyd use case marqeta use case this receipt attests that the named transaction's amount, currency, timing and scope were compared against the constraints of one specific delegated authority receipt that was signed before the transaction was authorised, and that the outcome was recomputed by this service from that comparison rather than supplied by the caller. it does not attest that the cardholder granted the delegation, that the declared agent identity is genuine, that the transaction was authorised or settled by any network, that goods or services were delivered, or that the displayed terms digest corresponds to anything a person actually read. it is not a payment authorisation and carries no cardholder credential. no card network, issuer, or regulator currently recognises this receipt as authentication data, as compelling evidence, or as a liability shift, and it does not create one. it does not deny, resolve, adjudicate or affect any dispute, and it does not limit any right a consumer holds under regulation e, regulation z, or any equivalent rule. this receipt evaluates one transaction against a per transaction constraint and does not evaluate cumulative spend, transaction velocity, or any aggregate limit across multiple transactions under the same mandate, so a series of individually conforming transactions may still exceed a spending intent this receipt cannot see. it evaluates the delegated authority receipt as supplied and inherits that receipt's revocation limitation, so it does not attest that the mandate was still unrevoked at the moment the transaction was authorised. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mandate-crossacceptor", "aliases": [ "cross acceptor", "cross.acceptor" ], "canonical_name": "Cross Acceptor Receipt", "canonical_type": "mandate.crossacceptor", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['mandate.crossacceptor']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that the issuing service, for the declared authority grouping and accounting window, receives the contribution and coverage evidence it describes, verifies the stated keyed pseudonym derivations under a committed window salt, recomputes the stated distinct acceptor count, dispersion class, commitments, cumulative relation, and coverage class, and signs that limited result.", "does_not_prove": "It does not attest that every action under the authority reaches the issuing service, that every acceptor reports, that a nonreporting acceptor is inactive, that the declared expected acceptor population is complete, that any acceptors are legally or institutionally unrelated, or that any pseudonym reveals an acceptor identity. It does not disclose the window salt, acceptor identities, contribution multiset, checked action count, exact dispersion ratio, cumulative constraint, or accumulated amount. It is not an authorization control and does not prevent, block, reverse, delay, ratify, or validate an underlying action. It does not decide whether an action, authority, constraint, report, acceptor, or actor is valid, authorized, proper, compliant, enforceable, or lawful. It does not deny, resolve, adjudicate, or affect any dispute or right.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/cross-acceptor-v1.json", "mint_route": null, "verify_route": "/verify/cross-acceptor", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/cross-acceptor", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/cross-acceptor", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/cross-acceptor -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 3.03, "mint_p95_ms": 3.363, "verify_p50_ms": 2.095, "verify_p95_ms": 2.305, "iterations": 200, "artifact_bytes": 2841, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/cross-acceptor.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "mutually blind acceptor check", "spend across rival counterparties", "no shared ledger reconciliation" ], "fit_examples": [ "Payment schemes", "Marketplaces", "Risk teams", "Signifyd", "Forter", "Marqeta" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" }, { "key": "forter", "label": "Forter use case", "url": "/partners/forter/" }, { "key": "marqeta", "label": "Marqeta use case", "url": "/partners/marqeta/" } ], "related": [ "mandate-aggregate", "mandate-conformance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "cross acceptor receipt mandate.crossacceptor mandate-crossacceptor cross acceptor cross.acceptor mutually blind acceptor check spend across rival counterparties no shared ledger reconciliation payment schemes marketplaces risk teams signifyd forter marqeta circle proof surface equinix use case stripe proof surface mastercard use case revolut use case signifyd use case forter use case marqeta use case this receipt attests only that the issuing service, for the declared authority grouping and accounting window, receives the contribution and coverage evidence it describes, verifies the stated keyed pseudonym derivations under a committed window salt, recomputes the stated distinct acceptor count, dispersion class, commitments, cumulative relation, and coverage class, and signs that limited result. it does not attest that every action under the authority reaches the issuing service, that every acceptor reports, that a nonreporting acceptor is inactive, that the declared expected acceptor population is complete, that any acceptors are legally or institutionally unrelated, or that any pseudonym reveals an acceptor identity. it does not disclose the window salt, acceptor identities, contribution multiset, checked action count, exact dispersion ratio, cumulative constraint, or accumulated amount. it is not an authorization control and does not prevent, block, reverse, delay, ratify, or validate an underlying action. it does not decide whether an action, authority, constraint, report, acceptor, or actor is valid, authorized, proper, compliant, enforceable, or lawful. it does not deny, resolve, adjudicate, or affect any dispute or right. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mandate-crossreference", "aliases": [ "cross reference join", "split credential join", "merchant side and payment side join" ], "canonical_name": "Mandate Cross Reference Receipt", "canonical_type": "mandate.crossreference", "category": "typed_receipt_contract", "family": "settlement-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['mandate.crossreference']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that two committed artifacts, each attested by a distinct registered attestor key, each declaring one cross reference field name and one keyed digest of that field value under a window salt committed before either artifact was presented, met or failed the declared equality relation, and that the equality outcome was recomputed by this service from the two commitments rather than supplied by the caller.", "does_not_prove": "It does not attest that either artifact is genuine, complete, or unaltered before commitment. It does not attest that either attestor is entitled to hold the artifact it committed. It does not attest that the transaction occurred, was authorised, settled, or was proper. It does not attest that the cross reference field is the right field for any purpose. A mismatch outcome does not mean that either side is wrong, and this receipt allocates no fault. It discloses neither artifact, neither field value, nor the salt.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/mandate-crossreference-v1.json", "mint_route": null, "verify_route": "/verify/mandate-crossreference", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/mandate-crossreference", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/mandate-crossreference", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/mandate-crossreference -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 6.333, "mint_p95_ms": 6.819, "verify_p50_ms": 5.519, "verify_p95_ms": 6.021, "iterations": 200, "artifact_bytes": 3044, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/mandate-crossreference.test.mjs" ], "integration_link": "/agentic-payments/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agentic-payments/", "use_cases": [ "joining two halves of a deliberately split credential", "one declared cross reference field compared across two attestors", "merchant dispute object joined to a payment dispute object", "reporting a cross reference mismatch without allocating fault" ], "fit_examples": [ "Payment schemes", "Merchants", "Agent operators", "Acquirers" ], "partner_pages": [ { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" } ], "related": [ "authorization-decision", "intent-affirmation", "ledger-parity", "mandate-conformance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "mandate cross reference receipt mandate.crossreference mandate-crossreference cross reference join split credential join merchant side and payment side join joining two halves of a deliberately split credential one declared cross reference field compared across two attestors merchant dispute object joined to a payment dispute object reporting a cross reference mismatch without allocating fault payment schemes merchants agent operators acquirers stripe proof surface mastercard use case this receipt attests only that two committed artifacts, each attested by a distinct registered attestor key, each declaring one cross reference field name and one keyed digest of that field value under a window salt committed before either artifact was presented, met or failed the declared equality relation, and that the equality outcome was recomputed by this service from the two commitments rather than supplied by the caller. it does not attest that either artifact is genuine, complete, or unaltered before commitment. it does not attest that either attestor is entitled to hold the artifact it committed. it does not attest that the transaction occurred, was authorised, settled, or was proper. it does not attest that the cross reference field is the right field for any purpose. a mismatch outcome does not mean that either side is wrong, and this receipt allocates no fault. it discloses neither artifact, neither field value, nor the salt. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mandate-evaluation", "aliases": [], "canonical_name": "Mandate Evaluation Receipt", "canonical_type": "mandate.evaluation", "category": "typed_receipt_contract", "family": "authority", "implementation_state": "code_complete_not_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['mandate.evaluation']: deployed false, production_ready_for_canon false, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt evaluates one observed action against a scope committed before the action was observed. It records a relation between a prior commitment and a later observation.", "does_not_prove": "It does not prevent an action, does not enforce a boundary, and does not attest that any sandbox, network filter, or policy engine ran. It carries no monetary fields and makes no finding of intent or fault.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/mandate-evaluation-v1.json", "mint_route": "/mint/mandate-evaluation", "verify_route": "/verify/mandate-evaluation", "host": null, "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "http://localhost:3000/mint/mandate-evaluation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "http://localhost:3000/verify/mandate-evaluation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST http://localhost:3000/verify/mandate-evaluation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "No benchmark is carried because this entry is not recorded as deployed. Numbers are only carried for a deployed entry.", "tests": [ "test/mandate-evaluation.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "agent action evaluation against a prior scope", "unmandated sub agent spawn record", "unregistered channel use record", "tool and network boundary evaluation", "agent budget and validity window evaluation" ], "fit_examples": [ "AI labs", "Agent platforms", "Evaluation infrastructure firms", "Inference providers", "Enterprise AI oversight teams", "AI insurers" ], "partner_pages": [], "related": [ "agent-coalition", "authority-delegation", "authority-revocation", "delegation-attenuation" ], "operational": false, "state_label": "Code complete, not deployed", "search_text": "mandate evaluation receipt mandate.evaluation mandate-evaluation agent action evaluation against a prior scope unmandated sub agent spawn record unregistered channel use record tool and network boundary evaluation agent budget and validity window evaluation ai labs agent platforms evaluation infrastructure firms inference providers enterprise ai oversight teams ai insurers this receipt evaluates one observed action against a scope committed before the action was observed. it records a relation between a prior commitment and a later observation. it does not prevent an action, does not enforce a boundary, and does not attest that any sandbox, network filter, or policy engine ran. it carries no monetary fields and makes no finding of intent or fault. typed_receipt_contract code complete, not deployed", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "meter-witness", "aliases": [ "meter witness", "metering receipt", "consumption receipt", "usage measurement proof" ], "canonical_name": "Meter Witness Receipt", "canonical_type": "meter.witness", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['meter.witness']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a calibration manifest signed by a named calibration authority, a set of interval records signed by the meter secure element whose public key that manifest names, a freshness nonce commitment established before those records were signed, and a collector batch root satisfy the stated deterministic metering procedure over the named intervals. A valid result means only that the reported interval energy equals the disclosed cumulative register delta, that each record hash, previous hash link, and batch inclusion path recompute, and that the manifest validity interval contains the interval bounds under the declared drift allowance.", "does_not_prove": "It does not establish that the meter measured the physical world correctly, that no physical tampering occurred without raising an event flag, that the firmware named by the manifest was honest when it was manufactured, or that the calibration authority signed a truthful manifest. It does not establish ownership of the site, the identity of the consumer, the source of the energy, or entitlement to any certificate, credit, payment, or settlement. This receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/meter-witness-v1.json", "mint_route": "/mint/meter-witness", "verify_route": "/verify/meter-witness", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/meter-witness", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/meter-witness", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/meter-witness -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/meter-witness.test.mjs" ], "integration_link": "/meter-witness/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/meter-witness/", "use_cases": [ "proving a metered quantity came from a calibrated device", "recomputing a billed total from register deltas the meter actually reported", "marking substituted intervals as substituted instead of hiding them", "refusing a reading whose calibration was not committed before the interval", "giving a customer a bill line they can check themselves" ], "fit_examples": [ "Energy suppliers and utilities", "Cloud and AI platforms billing on usage", "Large industrial buyers", "Metering and MDM vendors", "Regulators reviewing billing accuracy" ], "partner_pages": [ { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "harness", "label": "Harness use case", "url": "/harness/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" } ], "related": [ "control-replay", "ledger-parity", "sigr-bill" ], "operational": false, "state_label": "Production deployment reported", "search_text": "meter witness receipt meter.witness meter-witness meter witness metering receipt consumption receipt usage measurement proof proving a metered quantity came from a calibrated device recomputing a billed total from register deltas the meter actually reported marking substituted intervals as substituted instead of hiding them refusing a reading whose calibration was not committed before the interval giving a customer a bill line they can check themselves energy suppliers and utilities cloud and ai platforms billing on usage large industrial buyers metering and mdm vendors regulators reviewing billing accuracy equinix use case harness use case provable machines this receipt attests only that a calibration manifest signed by a named calibration authority, a set of interval records signed by the meter secure element whose public key that manifest names, a freshness nonce commitment established before those records were signed, and a collector batch root satisfy the stated deterministic metering procedure over the named intervals. a valid result means only that the reported interval energy equals the disclosed cumulative register delta, that each record hash, previous hash link, and batch inclusion path recompute, and that the manifest validity interval contains the interval bounds under the declared drift allowance. it does not establish that the meter measured the physical world correctly, that no physical tampering occurred without raising an event flag, that the firmware named by the manifest was honest when it was manufactured, or that the calibration authority signed a truthful manifest. it does not establish ownership of the site, the identity of the consumer, the source of the energy, or entitlement to any certificate, credit, payment, or settlement. this receipt decides no contractual, statutory, regulatory, evidentiary, or legal consequence, allocates no risk, fault, responsibility, liability, loss, or remedy, and authorizes no action, payment, sanction, denial, or remedy. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "model-change", "aliases": [ "Model Change Notice Receipt" ], "canonical_name": "Model Change Notice Receipt", "canonical_type": "model.change", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['model.change']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a party identified by a salted commitment recorded a change to the configuration serving requests, that the previous and the current configuration are distinct under their recorded commitments, how the recorded notice instant is placed against the recorded change instant under both declared drift bounds, and, when an evaluation receipt is bound to the notice, whether the configuration now serving is the same configuration that evaluation ran against.", "does_not_prove": "It does not attest that the current configuration performs better or worse than the previous one, that the evaluation was well designed, that the evaluation result was favorable, that the change was reviewed or approved by anyone, or that any output produced after the change was correct. The change class, the deployment scope, and the surface count are recorded as presented by the notifier and are not checked against any serving fleet here.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/model-change-v1.json", "mint_route": "/mint/model-change", "verify_route": "/verify/model-change", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/model-change", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/model-change", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/model-change -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/model-change.test.mjs" ], "integration_link": "/healthcare/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/healthcare/", "use_cases": [ "configuration serving requests changed", "notice placed against the change instant", "is the serving configuration the one evaluation ran against", "deployment scope recorded as presented", "previous and current config are distinct" ], "fit_examples": [], "partner_pages": [], "related": [ "agent-metamorphosis", "determinism-class", "disclosure-presentation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "model change notice receipt model.change model-change model change notice receipt configuration serving requests changed notice placed against the change instant is the serving configuration the one evaluation ran against deployment scope recorded as presented previous and current config are distinct this receipt attests only that a party identified by a salted commitment recorded a change to the configuration serving requests, that the previous and the current configuration are distinct under their recorded commitments, how the recorded notice instant is placed against the recorded change instant under both declared drift bounds, and, when an evaluation receipt is bound to the notice, whether the configuration now serving is the same configuration that evaluation ran against. it does not attest that the current configuration performs better or worse than the previous one, that the evaluation was well designed, that the evaluation result was favorable, that the change was reviewed or approved by anyone, or that any output produced after the change was correct. the change class, the deployment scope, and the surface count are recorded as presented by the notifier and are not checked against any serving fleet here. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "multi-source-divergence", "aliases": [], "canonical_name": "Multi Source Divergence Detection (MSDD)", "canonical_type": "divergence.record", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['divergence.record']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that assertion and observation, when both present, are each bound to response_sha256, that comparison_state correctly reflects whether assertion.value_sha256 equals observation.value_sha256 or that no observation was bound, and that assertion.basis is always relayed while observation.basis, when present, is always observed.", "does_not_prove": "It does not attest that the asserted value is true, does not attest that the observed value is true, does not merge or reconcile the two values into one figure, and does not identify the cause of a divergence when one is present. It requires no access to the provider's execution environment, no access to the observer's collection environment, and no trusted execution environment.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/divergence-record-v1.json", "mint_route": "/mint/divergence-record", "verify_route": "/verify/divergence-record", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/divergence-record", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/divergence-record", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/divergence-record-v1.example.agreement.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/divergence-record -H 'content-type: application/json' -d @canon/examples/divergence-record-v1.example.agreement.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.575, "mint_p95_ms": 2.908, "verify_p50_ms": 1.825, "verify_p95_ms": 2.027, "iterations": 200, "artifact_bytes": 1649, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments-2.test.mjs" ], "integration_link": "/multi-source-divergence/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/multi-source-divergence/", "use_cases": [ "multi source disagreement", "oracle divergence", "data feed integrity", "settlement data", "model disagreement", "Circle Gateway", "requested and materialized chain", "crosschain USDC", "ERC-1271", "erc1271" ], "fit_examples": [ "Kalshi", "Polymarket", "FanDuel", "DraftKings", "ICE", "Snowflake", "Cerebras", "Circle" ], "partner_pages": [ { "key": "cerebras-canon-matching", "label": "Cerebras canon matching", "url": "/partners/cerebras-canon-matching/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "draftkings-proof", "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/" }, { "key": "fanduel-proof", "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "polymarket-proof", "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "settlement-feed", "sigr-consensus", "supersession-receipt" ], "operational": false, "state_label": "Production deployment reported", "search_text": "multi source divergence detection (msdd) divergence.record multi-source-divergence multi source disagreement oracle divergence data feed integrity settlement data model disagreement circle gateway requested and materialized chain crosschain usdc erc-1271 erc1271 kalshi polymarket fanduel draftkings ice snowflake cerebras circle cerebras canon matching cerebras proof surface circle proof surface draftkings proof surface fanduel proof surface ice proof surface kalshi proof surface polymarket proof surface snowflake proof surface stripe proof surface this receipt attests that assertion and observation, when both present, are each bound to response_sha256, that comparison_state correctly reflects whether assertion.value_sha256 equals observation.value_sha256 or that no observation was bound, and that assertion.basis is always relayed while observation.basis, when present, is always observed. it does not attest that the asserted value is true, does not attest that the observed value is true, does not merge or reconcile the two values into one figure, and does not identify the cause of a divergence when one is present. it requires no access to the provider's execution environment, no access to the observer's collection environment, and no trusted execution environment. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "numeric-lineage", "aliases": [ "numeric lineage", "reduction order receipt", "batch occupancy divergence", "arithmetic lineage" ], "canonical_name": "Numeric Lineage Receipt", "canonical_type": "numeric.lineage", "category": "typed_receipt_contract", "family": "serving-state", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['numeric.lineage']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Numeric Lineage record. Attests that an identical request set declaring a temperature of zero was transmitted to one named serving endpoint at two or more batch occupancy levels induced by the measuring gateway, that the bitwise divergence of the emitted token sequence across those levels was measured against a divergence bound whose digest was fixed before the first measured request was transmitted, that the accumulator width identifier, the reduction split count, and the reduction order identifier reported for each level are recorded as signed fields, and that the recorded serving set change and the recorded withholding of settlement authorization were recomputed from the measurement rather than supplied.", "does_not_prove": "It does not attest that any emitted token sequence is correct, does not attest the numeric precision of the weights, does not attest a quantization level, does not attest the identity of the model served, and does not attest that any nondeterminism observed arose from batch occupancy rather than from another source the endpoint may have introduced.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/numeric-lineage-v1.json", "mint_route": "/mint/numeric-lineage", "verify_route": "/verify/numeric-lineage", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/numeric-lineage", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/numeric-lineage", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/numeric-lineage -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/numeric-lineage.test.mjs" ], "integration_link": "/serving-state/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/serving-state/", "use_cases": [ "proving an identical temperature zero request set diverged across batch occupancy levels", "fixing a divergence bound by digest before the first measured request is sent", "recording the accumulator width, reduction split count and reduction order per level", "recomputing a route change from the measurement rather than accepting a claim", "recomputing the divergence bound and the measured spread from the record" ], "fit_examples": [ "Inference providers", "Model routers", "Silicon and serving vendors", "Prediction and scoring venues", "Model evaluation teams" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" } ], "related": [ "cache-epoch", "entropy-custody", "multi-source-divergence", "routing-receipt", "sigr-bill" ], "operational": false, "state_label": "Production deployment reported", "search_text": "numeric lineage receipt numeric.lineage numeric-lineage numeric lineage reduction order receipt batch occupancy divergence arithmetic lineage proving an identical temperature zero request set diverged across batch occupancy levels fixing a divergence bound by digest before the first measured request is sent recording the accumulator width, reduction split count and reduction order per level recomputing a route change from the measurement rather than accepting a claim recomputing the divergence bound and the measured spread from the record inference providers model routers silicon and serving vendors prediction and scoring venues model evaluation teams openrouter proof surface fireworks numeric lineage record. attests that an identical request set declaring a temperature of zero was transmitted to one named serving endpoint at two or more batch occupancy levels induced by the measuring gateway, that the bitwise divergence of the emitted token sequence across those levels was measured against a divergence bound whose digest was fixed before the first measured request was transmitted, that the accumulator width identifier, the reduction split count, and the reduction order identifier reported for each level are recorded as signed fields, and that the recorded serving set change and the recorded withholding of settlement authorization were recomputed from the measurement rather than supplied. it does not attest that any emitted token sequence is correct, does not attest the numeric precision of the weights, does not attest a quantization level, does not attest the identity of the model served, and does not attest that any nondeterminism observed arose from batch occupancy rather than from another source the endpoint may have introduced. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "origin-raster", "aliases": [ "Raster Origin Assertion" ], "canonical_name": "Raster Origin Assertion", "canonical_type": "origin.raster", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['origin.raster']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Raster Origin Assertion receipt. Whether a region of a page was captured from a physical document or rendered by software is now a real question, so this receipt carries the origin class per region, the detector and version that produced it, the signals it relied on, its score with a named scale, and the ordered lineage of render profiles applied to that region, all signed by a named asserting key. Two verdict fields are fixed and the caller can never set them: the origin class is an assertion, and the origin is not forensically proven.", "does_not_prove": "It does not inspect the raster and does not attest that any region is authentic; detector_executed_by_service is fixed to false.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/origin-raster-v1.json", "mint_route": "/mint/origin-raster", "verify_route": "/verify/origin-raster", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/origin-raster", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "raster_assertion_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "render_profile_digest_sha256": "<64 hex chars, sha256 of your evidence>", "asserting_key_id": "", "subjects": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/origin-raster", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/origin-raster -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"raster_assertion_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"render_profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"asserting_key_id\": \"\", \"subjects\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.635, "mint_p95_ms": 2.998, "verify_p50_ms": 1.983, "verify_p95_ms": 2.265, "iterations": 200, "artifact_bytes": 2454, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "origin_class_is_an_assertion": true, "origin_forensically_proven": false, "detector_executed_by_service": false, "subject_count": "integer", "captured_subject_count": "integer", "synthetic_render_subject_count": "integer", "mixed_subject_count": "integer", "undetermined_subject_count": "integer", "every_subject_carries_a_named_detector": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "captured or synthetic pixels", "pasted region assertion", "recompression signal record", "document tampering assertion", "detector scored region" ], "fit_examples": [], "partner_pages": [], "related": [ "media-origin-receipt", "render-profile" ], "operational": false, "state_label": "Production deployment reported", "search_text": "raster origin assertion origin.raster origin-raster raster origin assertion captured or synthetic pixels pasted region assertion recompression signal record document tampering assertion detector scored region raster origin assertion receipt. whether a region of a page was captured from a physical document or rendered by software is now a real question, so this receipt carries the origin class per region, the detector and version that produced it, the signals it relied on, its score with a named scale, and the ordered lineage of render profiles applied to that region, all signed by a named asserting key. two verdict fields are fixed and the caller can never set them: the origin class is an assertion, and the origin is not forensically proven. it does not inspect the raster and does not attest that any region is authentic; detector_executed_by_service is fixed to false. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "originproof", "aliases": [], "canonical_name": "OriginProof", "canonical_type": "origin.proof", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['origin.proof']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "OriginProof, Human-Origin Attestation, receipt. Attests that an asset_id and a caller held production-conditions evidence digest were recorded and signed at recorded_at.", "does_not_prove": "It attests only the conditions of production (credential clearance, session integrity, declared tool or model use scope) that the caller declared, never that the output itself was provably human. This receipt is distinct from media.origin, which attests media content origin and rights evidence, not human production conditions; they must never be merged or aliased.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/origin-proof-v1.json", "mint_route": "/mint/origin-proof", "verify_route": "/verify/origin-proof", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/origin-proof", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "asset_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "origin_claim_type": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/origin-proof", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/origin-proof -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"asset_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"origin_claim_type\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.566, "mint_p95_ms": 2.893, "verify_p50_ms": 1.803, "verify_p95_ms": 2.224, "iterations": 200, "artifact_bytes": 1212, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "matches_media_origin_family": false, "human_output_provable": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/originproof/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/originproof/", "use_cases": [ "human origin attestation", "expert work provenance", "dataset labelling", "annotation integrity", "human in the loop" ], "fit_examples": [ "Mercor", "micro1", "Surge", "Handshake", "Deccan" ], "partner_pages": [ { "key": "deccan-quality-proof", "label": "Deccan quality proof", "url": "/partners/deccan-quality-proof/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" }, { "key": "mercor-pipeline-integrity", "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/" }, { "key": "micro1-certified-proof", "label": "micro1 certified proof", "url": "/partners/micro1-certified-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "surge-neutrality", "label": "Surge neutrality", "url": "/partners/surge-neutrality/" } ], "related": [ "evar", "media-origin-receipt", "royalty-provenance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "originproof origin.proof originproof human origin attestation expert work provenance dataset labelling annotation integrity human in the loop mercor micro1 surge handshake deccan deccan quality proof handshake use case mercor pipeline integrity micro1 certified proof stripe proof surface surge neutrality originproof, human-origin attestation, receipt. attests that an asset_id and a caller held production-conditions evidence digest were recorded and signed at recorded_at. it attests only the conditions of production (credential clearance, session integrity, declared tool or model use scope) that the caller declared, never that the output itself was provably human. this receipt is distinct from media.origin, which attests media content origin and rights evidence, not human production conditions; they must never be merged or aliased. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "parametric-trigger", "aliases": [], "canonical_name": "Parametric Trigger Receipt", "canonical_type": "parametric.trigger", "category": "typed_receipt_contract", "family": "bpa", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['parametric.trigger']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that a named parametric condition was evaluated against one specific Bonded Performance Attestation, that the policy terms digest was committed at or before the governing budget was declared and the budget was declared at or before its measurement window opened, and that trigger_state was recomputed by this service from the referenced attestation rather than supplied by the caller.", "does_not_prove": "It does not create, confirm, price, underwrite, or interpret any insurance policy, and this service never receives the policy terms. It does not establish that any claim is payable, does not effect or authorise any payment, and does not attest that the measured outputs were correct or that any loss occurred. The measuring party is recorded as declared and is not verified here. Whether this trigger state entitles any party to payment is determined solely by the parties' own contract.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/parametric-trigger-v1.json", "mint_route": "/mint/parametric/trigger", "verify_route": "/verify/parametric-trigger", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/parametric/trigger", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/parametric-trigger", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/parametric-trigger -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 10.486, "mint_p95_ms": 11.378, "verify_p50_ms": 5.862, "verify_p95_ms": 6.92, "iterations": 200, "artifact_bytes": 2020, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/parametric-and-mandate.test.mjs" ], "integration_link": "/bonded-performance-attestation/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/bonded-performance-attestation/", "use_cases": [ "parametric condition", "threshold precommitment", "performance policy evidence", "independent trigger verification" ], "fit_examples": [ "Insurers", "AI service providers", "Enterprise risk teams", "Armilla" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "lemonade", "label": "Lemonade use case", "url": "/lemonade/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" } ], "related": [ "bpa-attestation", "bpa-budget", "sigr-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "parametric trigger receipt parametric.trigger parametric-trigger parametric condition threshold precommitment performance policy evidence independent trigger verification insurers ai service providers enterprise risk teams armilla aiuc proof surface harness proof surface lemonade use case armilla use case this receipt attests that a named parametric condition was evaluated against one specific bonded performance attestation, that the policy terms digest was committed at or before the governing budget was declared and the budget was declared at or before its measurement window opened, and that trigger_state was recomputed by this service from the referenced attestation rather than supplied by the caller. it does not create, confirm, price, underwrite, or interpret any insurance policy, and this service never receives the policy terms. it does not establish that any claim is payable, does not effect or authorise any payment, and does not attest that the measured outputs were correct or that any loss occurred. the measuring party is recorded as declared and is not verified here. whether this trigger state entitles any party to payment is determined solely by the parties' own contract. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "pbs", "aliases": [], "canonical_name": "Provenance-Bonded Sandbox", "canonical_type": "usap.pbs", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.pbs']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Provenance-Bonded Sandbox receipt. Attests that a sandbox_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any kernel or eBPF hook actually enforced the declared sandbox boundary, or that runtime drift was actually detected; ebpf_integration_status is fixed to not_proven because no such integration exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-pbs-v1.json", "mint_route": "/mint/usap-pbs", "verify_route": "/verify/usap-pbs", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-pbs", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "sandbox_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-pbs", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-pbs -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"sandbox_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.498, "mint_p95_ms": 2.768, "verify_p50_ms": 1.89, "verify_p95_ms": 2.095, "iterations": 200, "artifact_bytes": 1049, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "ebpf_integration_status": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/provenance-bonded-sandbox/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/provenance-bonded-sandbox/", "use_cases": [ "sandbox integrity", "runtime drift", "agent containment", "trading sandbox", "environment root" ], "fit_examples": [ "Kalshi", "FanDuel", "DraftKings", "Polymarket", "Fanatics", "Robinhood", "Cisco", "AIUC" ], "partner_pages": [ { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "fanduel-proof", "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/" }, { "key": "draftkings-proof", "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/" }, { "key": "polymarket-proof", "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/" }, { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" } ], "related": [ "egress-bond", "perimeter-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "provenance-bonded sandbox usap.pbs pbs sandbox integrity runtime drift agent containment trading sandbox environment root kalshi fanduel draftkings polymarket fanatics robinhood cisco aiuc kalshi proof surface fanduel proof surface draftkings proof surface polymarket proof surface fanatics proof surface robinhood proof surface aiuc proof surface cisco use case provenance-bonded sandbox receipt. attests that a sandbox_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any kernel or ebpf hook actually enforced the declared sandbox boundary, or that runtime drift was actually detected; ebpf_integration_status is fixed to not_proven because no such integration exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "perimeter-bond", "aliases": [], "canonical_name": "Perimeter Bond", "canonical_type": "usap.perimeter", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.perimeter']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Perimeter Bond receipt. Attests that a perimeter_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any eBPF stack actually enforced the declared perimeter, or that an outbound attempt was actually intercepted; ebpf_stack_integration is fixed to pending_design_partner because no such integration exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-perimeter-v1.json", "mint_route": "/mint/usap-perimeter", "verify_route": "/verify/usap-perimeter", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-perimeter", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "perimeter_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-perimeter", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-perimeter -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"perimeter_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.499, "mint_p95_ms": 4.947, "verify_p50_ms": 1.806, "verify_p95_ms": 2.113, "iterations": 200, "artifact_bytes": 1071, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "ebpf_stack_integration": "pending_design_partner" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/perimeter-bond/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/perimeter-bond/", "use_cases": [ "outbound network control", "reach control", "egress allowlist", "agent network policy", "robot teleop boundary" ], "fit_examples": [ "Cisco", "Cloudflare", "Circle", "Kodiak Robotics", "Snowflake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" } ], "related": [ "egress-bond", "pbs" ], "operational": false, "state_label": "Production deployment reported", "search_text": "perimeter bond usap.perimeter perimeter-bond outbound network control reach control egress allowlist agent network policy robot teleop boundary cisco cloudflare circle kodiak robotics snowflake cisco use case cloudflare proof surface circle proof surface kodiak robotics proof surface perimeter bond receipt. attests that a perimeter_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any ebpf stack actually enforced the declared perimeter, or that an outbound attempt was actually intercepted; ebpf_stack_integration is fixed to pending_design_partner because no such integration exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "portfolio-exposure", "aliases": [], "canonical_name": "Portfolio Exposure Receipt", "canonical_type": "portfolio.exposure", "category": "typed_receipt_contract", "family": "risk-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['portfolio.exposure']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that concentration counts and share ratios were recomputed by this service over a set of opaque commitments supplied for one book as of a stated time, that no group smaller than five members was reported, and that this service received no insured identity, no dependency name, and no policy term.", "does_not_prove": "It does not attest that the commitments are correct, that they were computed honestly, that the book is complete, or that any member is insured at all. Because the commitments are opaque to this service by design, this service cannot detect a member that was omitted, duplicated, or mis committed. It does not measure, price, or opine on risk, does not constitute an actuarial analysis, a capital adequacy assessment, or a reinsurance recommendation, and it does not attest that a concentration reported here would produce a correlated loss.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/portfolio-exposure-v1.json", "mint_route": "/mint/portfolio/exposure", "verify_route": "/verify/portfolio-exposure", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/portfolio/exposure", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/portfolio-exposure", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/portfolio-exposure -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.525, "mint_p95_ms": 2.914, "verify_p50_ms": 1.803, "verify_p95_ms": 2.192, "iterations": 200, "artifact_bytes": 2385, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/portfolio-exposure.test.mjs" ], "integration_link": "/agents/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/agents/", "use_cases": [ "opaque commitment concentration", "privacy preserving dependency reporting", "portfolio concentration record" ], "fit_examples": [ "Insurers", "Risk teams", "Reinsurance teams", "Armilla" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "lemonade", "label": "Lemonade use case", "url": "/lemonade/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" } ], "related": [ "eval-administration", "sigr-consensus" ], "operational": false, "state_label": "Production deployment reported", "search_text": "portfolio exposure receipt portfolio.exposure portfolio-exposure opaque commitment concentration privacy preserving dependency reporting portfolio concentration record insurers risk teams reinsurance teams armilla aiuc proof surface ice proof surface lemonade use case robinhood proof surface armilla use case this receipt attests that concentration counts and share ratios were recomputed by this service over a set of opaque commitments supplied for one book as of a stated time, that no group smaller than five members was reported, and that this service received no insured identity, no dependency name, and no policy term. it does not attest that the commitments are correct, that they were computed honestly, that the book is complete, or that any member is insured at all. because the commitments are opaque to this service by design, this service cannot detect a member that was omitted, duplicated, or mis committed. it does not measure, price, or opine on risk, does not constitute an actuarial analysis, a capital adequacy assessment, or a reinsurance recommendation, and it does not attest that a concentration reported here would produce a correlated loss. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "ppr", "aliases": [], "canonical_name": "PPR Wearable", "canonical_type": "ppr.wearable", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['ppr.wearable']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Physiological Provenance Receipt for wearable sensor data. Attests that a record_id, a metric_type, and a caller held metric-value digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that any wearable device was actually attested at the hardware level; device_attestation_status is fixed to not_proven because no device attestation integration exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/ppr-wearable-v1.json", "mint_route": "/mint/ppr-wearable", "verify_route": "/verify/ppr-wearable", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/ppr-wearable", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "record_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "metric_type": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/ppr-wearable", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/ppr-wearable -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"record_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"metric_type\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.496, "mint_p95_ms": 2.882, "verify_p50_ms": 1.795, "verify_p95_ms": 2.056, "iterations": 200, "artifact_bytes": 1021, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "device_attestation_status": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/ppr-wearables/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/ppr-wearables/", "use_cases": [ "wearable telemetry", "sensor provenance", "physiological signal", "health data", "robot sensor stream" ], "fit_examples": [ "Robot.com", "Kodiak Robotics", "Cisco", "Fanatics" ], "partner_pages": [ { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "robotics", "label": "Robotics", "url": "/robotics/" } ], "related": [ "hiveseal-qpuf", "media-origin-receipt" ], "operational": false, "state_label": "Production deployment reported", "search_text": "ppr wearable ppr.wearable ppr wearable telemetry sensor provenance physiological signal health data robot sensor stream robot.com kodiak robotics cisco fanatics robot.com proof surface kodiak robotics proof surface robotics physiological provenance receipt for wearable sensor data. attests that a record_id, a metric_type, and a caller held metric-value digest were recorded and signed at recorded_at. it does not attest that any wearable device was actually attested at the hardware level; device_attestation_status is fixed to not_proven because no device attestation integration exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "proof-pre-fill", "aliases": [], "canonical_name": "Proof Pre-Fill", "canonical_type": "proof.prefill", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['proof.prefill']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Proof Pre-Fill receipt. Attests that a prefill_id, a template_ref, and a caller held prefilled-fields digest were recorded and signed at recorded_at, and that template_conformance recomputes exactly from a caller supplied template_digest_match flag.", "does_not_prove": "It does not attest that the template itself is fit for purpose, or that the prefilled values are factually correct.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/proof-prefill-v1.json", "mint_route": "/mint/proof-prefill", "verify_route": "/verify/proof-prefill", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/proof-prefill", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "prefill_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "template_ref": "", "template_digest_match": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/proof-prefill", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/proof-prefill -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"prefill_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"template_ref\": \"\", \"template_digest_match\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.465, "mint_p95_ms": 2.866, "verify_p50_ms": 1.73, "verify_p95_ms": 1.962, "iterations": 200, "artifact_bytes": 1020, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "template_conformance": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/carnac-live-ink/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/carnac-live-ink/", "use_cases": [ "pre effect receipt", "fingerprint binding", "form pre fill", "before the act proof" ], "fit_examples": [ "Circle", "Chime", "Cisco", "Postman" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" } ], "related": [ "carnac", "inkframe-v1", "stipryn" ], "operational": false, "state_label": "Production deployment reported", "search_text": "proof pre-fill proof.prefill proof-pre-fill pre effect receipt fingerprint binding form pre fill before the act proof circle chime cisco postman circle proof surface chime proof surface postman proof surface proof pre-fill receipt. attests that a prefill_id, a template_ref, and a caller held prefilled-fields digest were recorded and signed at recorded_at, and that template_conformance recomputes exactly from a caller supplied template_digest_match flag. it does not attest that the template itself is fit for purpose, or that the prefilled values are factually correct. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "proof-transition", "aliases": [], "canonical_name": "Proof state transition container", "canonical_type": "proof.transition", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['proof.transition']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the recorded transition sequence in signed_body is exactly what the predeclared transition table would produce from the named admissible input receipts, applied in the stated order, and that each input's issuer_key_id and admitted_role were declared in issuer_registry at the time this run was minted. Schema level and portable proof verification check the digest bindings only. Full verification additionally requires the caller to supply the actual input receipt envelopes and cryptographically verifies each one through the trust resolver before accepting it.", "does_not_prove": "This receipt does not attest that the transition table encodes correct business logic, that an input receipt not supplied for full verification is itself valid, or that any downstream effect named by effect_gate actually occurred. It also does not attest that issuer_registry is the complete or current set of issuers trusted outside this run, only the set this run declares itself bound to.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/proof-state-transition-v1.json", "mint_route": "/mint/proof-transition", "verify_route": "/verify/proof-transition", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/proof-transition", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/proof-transition", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/proof-transition -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.777, "mint_p95_ms": 3.453, "verify_p50_ms": 1.949, "verify_p95_ms": 2.234, "iterations": 200, "artifact_bytes": 2666, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/verify/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/verify/", "use_cases": [ "state machine audit", "workflow provenance", "pipeline stage proof", "deployment pipeline", "robot task sequence", "Circle Gateway", "Gateway attestation", "crosschain USDC", "ERC-1271", "erc1271" ], "fit_examples": [ "Harness", "Cisco", "Snowflake", "Kodiak Robotics", "Robot.com", "Circle" ], "partner_pages": [ { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "effect-closure", "proof-transition-portable" ], "operational": false, "state_label": "Production deployment reported", "search_text": "proof state transition container proof.transition proof-transition state machine audit workflow provenance pipeline stage proof deployment pipeline robot task sequence circle gateway gateway attestation crosschain usdc erc-1271 erc1271 harness cisco snowflake kodiak robotics robot.com circle harness proof surface kodiak robotics proof surface robot.com proof surface provable machines circle proof surface this receipt attests that the recorded transition sequence in signed_body is exactly what the predeclared transition table would produce from the named admissible input receipts, applied in the stated order, and that each input's issuer_key_id and admitted_role were declared in issuer_registry at the time this run was minted. schema level and portable proof verification check the digest bindings only. full verification additionally requires the caller to supply the actual input receipt envelopes and cryptographically verifies each one through the trust resolver before accepting it. this receipt does not attest that the transition table encodes correct business logic, that an input receipt not supplied for full verification is itself valid, or that any downstream effect named by effect_gate actually occurred. it also does not attest that issuer_registry is the complete or current set of issuers trusted outside this run, only the set this run declares itself bound to. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "proof-transition-portable", "aliases": [], "canonical_name": "Portable transition proof", "canonical_type": "proof.transition.portable", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['proof.transition.portable']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the exporting signer named in key_id asserts the workflow_id, table_sha256, registry_sha256, final_state, effect_gate_sha256, input_count, and input_commitment bound here for the run named by run_id, exported from the full proof.transition container named by source_receipt_id and source_payload_sha256. Portable verification authenticates this signed assertion and its internal bindings only.", "does_not_prove": "It does not independently replay the omitted constituent inputs, does not verify the source container's own signature, and does not attest that the source container itself still exists or still verifies. A verifier who needs that replay must obtain and verify the full proof.transition container separately.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/proof-transition-portable-v1.json", "mint_route": null, "verify_route": "/verify/proof-transition-portable", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/proof-transition-portable", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/proof-transition-portable", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/proof-transition-portable-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/proof-transition-portable -H 'content-type: application/json' -d @canon/examples/proof-transition-portable-v1.example.json", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 0.638, "mint_p95_ms": 0.802, "verify_p50_ms": 1.853, "verify_p95_ms": 2.141, "iterations": 200, "artifact_bytes": 1777, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/verify/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/verify/", "use_cases": [ "offline audit export", "regulator handoff", "evidence portability", "third party review", "Circle Gateway", "Gateway attestation", "crosschain USDC", "ERC-1271", "erc1271" ], "fit_examples": [ "ICE", "Kalshi", "Snowflake", "Cisco", "Circle" ], "partner_pages": [ { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "disclosure-free-replay", "proof-transition" ], "operational": false, "state_label": "Production deployment reported", "search_text": "portable transition proof proof.transition.portable proof-transition-portable offline audit export regulator handoff evidence portability third party review circle gateway gateway attestation crosschain usdc erc-1271 erc1271 ice kalshi snowflake cisco circle ice proof surface kalshi proof surface snowflake proof surface circle proof surface this receipt attests that the exporting signer named in key_id asserts the workflow_id, table_sha256, registry_sha256, final_state, effect_gate_sha256, input_count, and input_commitment bound here for the run named by run_id, exported from the full proof.transition container named by source_receipt_id and source_payload_sha256. portable verification authenticates this signed assertion and its internal bindings only. it does not independently replay the omitted constituent inputs, does not verify the source container's own signature, and does not attest that the source container itself still exists or still verifies. a verifier who needs that replay must obtain and verify the full proof.transition container separately. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "recovery-determination", "aliases": [ "settlement position", "recovery position", "allocation table lookup" ], "canonical_name": "Recovery Determination Receipt", "canonical_type": "recovery.determination", "category": "typed_receipt_contract", "family": "bpa", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['recovery.determination']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a named observer recomputed a settlement position between two named parties from one named fault attribution outcome and a precommitted allocation table whose digest was committed before the loss instant.", "does_not_prove": "It does not attest that any amount is owed, that any party will pay, that the allocation table is enforceable, or that any contract exists between the named parties. Whether the recomputed position entitles anyone to payment is decided solely by the parties' own agreement.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/recovery-determination-v1.json", "mint_route": null, "verify_route": "/verify/recovery-determination", "host": "https://thehiveryiq.com/v1", "auth_required": "No mint route exists for this type; it is produced as an export. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/recovery-determination", "auth": "none", "body": { "receipt": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/recovery-determination", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/recovery-determination -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "This type has no mint route. It is produced as an export by another route and only verified here, so there is nothing to authenticate against." }, "benchmark": { "mint_p50_ms": 7.166, "mint_p95_ms": 7.957, "verify_p50_ms": 4.093, "verify_p95_ms": 4.647, "iterations": 200, "artifact_bytes": 2134, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/recovery-determination.test.mjs" ], "integration_link": "/amex/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/amex/", "use_cases": [ "recovery against an agent operator after a paid claim", "precommitted loss allocation table lookup", "settlement position between a claimant and a respondent", "hindsight table refusal" ], "fit_examples": [ "Issuers", "Insurers", "Agent operators", "Reinsurers", "Armilla", "Signifyd" ], "partner_pages": [ { "key": "amex", "label": "American Express use case", "url": "/amex/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" }, { "key": "revolut", "label": "Revolut use case", "url": "/partners/revolut/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" }, { "key": "signifyd", "label": "Signifyd use case", "url": "/partners/signifyd/" } ], "related": [ "conduct-record", "fault-attribution", "parametric-trigger", "portfolio-exposure" ], "operational": false, "state_label": "Production deployment reported", "search_text": "recovery determination receipt recovery.determination recovery-determination settlement position recovery position allocation table lookup recovery against an agent operator after a paid claim precommitted loss allocation table lookup settlement position between a claimant and a respondent hindsight table refusal issuers insurers agent operators reinsurers armilla signifyd american express use case aiuc proof surface worldpay use case revolut use case armilla use case signifyd use case this receipt attests only that a named observer recomputed a settlement position between two named parties from one named fault attribution outcome and a precommitted allocation table whose digest was committed before the loss instant. it does not attest that any amount is owed, that any party will pay, that the allocation table is enforceable, or that any contract exists between the named parties. whether the recomputed position entitles anyone to payment is decided solely by the parties' own agreement. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "refusal-ledger", "aliases": [], "canonical_name": "Refusal Ledger", "canonical_type": "usap.refusal", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['usap.refusal']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Refusal Ledger receipt. Attests that a refusal_event_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live.", "does_not_prove": "It does not attest that any policy engine actually authorized the mutation, or that a zk envelope bond circuit checked it; policy_engine_status and zk_envelope_bond_status are fixed to not_proven because no such engine or circuit exists in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/usap-refusal-v1.json", "mint_route": "/mint/usap-refusal", "verify_route": "/verify/usap-refusal", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/usap-refusal", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "refusal_event_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/usap-refusal", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/usap-refusal -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"refusal_event_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.605, "mint_p95_ms": 2.874, "verify_p50_ms": 1.746, "verify_p95_ms": 2.039, "iterations": 200, "artifact_bytes": 1113, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "policy_engine_status": "not_proven", "zk_envelope_bond_status": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/refusal-ledger/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/refusal-ledger/", "use_cases": [ "refusal policy", "policy change control", "guardrail audit", "safety policy mutation" ], "fit_examples": [ "AIUC", "Cisco", "Snowflake", "Fireworks" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" } ], "related": [ "howler-sae", "imprimatur" ], "operational": false, "state_label": "Production deployment reported", "search_text": "refusal ledger usap.refusal refusal-ledger refusal policy policy change control guardrail audit safety policy mutation aiuc cisco snowflake fireworks aiuc proof surface cisco use case refusal ledger receipt. attests that a refusal_event_id and a caller held evidence digest were recorded and signed at recorded_at, and that the crypto envelope itself is live. it does not attest that any policy engine actually authorized the mutation, or that a zk envelope bond circuit checked it; policy_engine_status and zk_envelope_bond_status are fixed to not_proven because no such engine or circuit exists in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "render-profile", "aliases": [ "Render Profile Commitment" ], "canonical_name": "Render Profile Commitment", "canonical_type": "render.profile", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['render.profile']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Render Profile Commitment receipt. Pixel coordinates only mean something against the settings that produced the pixels, so this receipt commits the resolution, color space, bit depth, page box selection, and rotation together, and the service recomputes the profile digest over a canonical form of exactly those fields. A declared digest that", "does_not_prove": "does not recompute fails the receipt. It does not render the page and does not confirm that any raster was produced under this profile; raster_reproduced_by_service is fixed to false because the service never receives the page.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/render-profile-v1.json", "mint_route": "/mint/render-profile", "verify_route": "/verify/render-profile", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/render-profile", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "profile_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "resolution_dpi": "", "color_space": "", "bit_depth": "", "page_box": "", "rotation_degrees": "", "profile_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/render-profile", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/render-profile -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"profile_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"resolution_dpi\": \"\", \"color_space\": \"\", \"bit_depth\": \"\", \"page_box\": \"\", \"rotation_degrees\": \"\", \"profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.61, "mint_p95_ms": 3.028, "verify_p50_ms": 1.934, "verify_p95_ms": 2.19, "iterations": 200, "artifact_bytes": 1491, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "raster_reproduced_by_service": false, "profile_digest_recomputed": "string", "profile_digest_recomputes": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "raster settings commitment", "resolution and color space provenance", "page box and rotation record", "reproducible document rendering", "scan profile evidence" ], "fit_examples": [], "partner_pages": [], "related": [ "origin-raster", "stage-replay", "tolerance-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "render profile commitment render.profile render-profile render profile commitment raster settings commitment resolution and color space provenance page box and rotation record reproducible document rendering scan profile evidence render profile commitment receipt. pixel coordinates only mean something against the settings that produced the pixels, so this receipt commits the resolution, color space, bit depth, page box selection, and rotation together, and the service recomputes the profile digest over a canonical form of exactly those fields. a declared digest that does not recompute fails the receipt. it does not render the page and does not confirm that any raster was produced under this profile; raster_reproduced_by_service is fixed to false because the service never receives the page. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "retention-policy", "aliases": [ "Retention Policy Commitment Receipt" ], "canonical_name": "Retention Policy Commitment Receipt", "canonical_type": "retention.policy", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['retention.policy']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a party, presented as a salted commitment, recorded a retention policy text at the named policy identifier, version, and text digest, with the recorded retention period and grace period over a scope presented as a salted commitment, at the recorded commitment instant, and that the recorded effective instant is not earlier than that commitment instant under the declared drift bounds.", "does_not_prove": "It does not establish that the policy text is adequate for any purpose, that it is lawful in any place, that any authority read it or accepted it, that it was ever applied to any record, or that any deletion it describes happened. Whether a later deletion event is consistent_with this recorded policy is the question a separate retention purge receipt asks, and this receipt answers none of it. The policy text itself never enters this receipt, and the recorded periods and instants are presented as reported by the recording party.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/retention-policy-v1.json", "mint_route": "/mint/retention-policy", "verify_route": "/verify/retention-policy", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/retention-policy", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/retention-policy", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/retention-policy -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/retention-policy.test.mjs" ], "integration_link": "/healthcare/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/healthcare/", "use_cases": [ "retention policy text committed at a version", "retention and grace period on the record", "policy identifier bound to a text digest", "effective instant not before the commitment", "scope committed without disclosing it" ], "fit_examples": [], "partner_pages": [], "related": [ "custody-handoff", "retention-purge" ], "operational": false, "state_label": "Production deployment reported", "search_text": "retention policy commitment receipt retention.policy retention-policy retention policy commitment receipt retention policy text committed at a version retention and grace period on the record policy identifier bound to a text digest effective instant not before the commitment scope committed without disclosing it this receipt attests only that a party, presented as a salted commitment, recorded a retention policy text at the named policy identifier, version, and text digest, with the recorded retention period and grace period over a scope presented as a salted commitment, at the recorded commitment instant, and that the recorded effective instant is not earlier than that commitment instant under the declared drift bounds. it does not establish that the policy text is adequate for any purpose, that it is lawful in any place, that any authority read it or accepted it, that it was ever applied to any record, or that any deletion it describes happened. whether a later deletion event is consistent_with this recorded policy is the question a separate retention purge receipt asks, and this receipt answers none of it. the policy text itself never enters this receipt, and the recorded periods and instants are presented as reported by the recording party. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "retention-purge", "aliases": [ "Retention Purge Receipt" ], "canonical_name": "Retention Purge Receipt", "canonical_type": "retention.purge", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['retention.purge']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests only that a deletion event, evidenced by a linked prior erasure receipt, was recorded against a named retention policy at a named version whose text digest was published by a prior commitment receipt issued at or before the recorded retention start, and how the recorded deletion instant relates, under the declared drift bounds, to the window that policy version described.", "does_not_prove": "It does not establish that no copy of the named data exists anywhere, that backups, caches, exports, printouts, downstream recipients, or third party systems were reached, that the policy version was itself adequate for any purpose, that any rule was satisfied, or that anything was removed beyond the scope commitment recorded here. Every party, object set, and scope descriptor is presented as a salted commitment, and the counts and instants are recorded as reported by the executing system.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/retention-purge-v1.json", "mint_route": "/mint/retention-purge", "verify_route": "/verify/retention-purge", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/retention-purge", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/retention-purge", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/retention-purge -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/retention-purge.test.mjs" ], "integration_link": "/healthcare/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/healthcare/", "use_cases": [ "deletion recorded against a named policy version", "was the deletion inside the policy window", "erasure receipt bound to a retention commitment", "scoped deletion evidence", "deletion instant against a declared drift bound" ], "fit_examples": [], "partner_pages": [], "related": [ "disclosure-free-replay", "retention-policy" ], "operational": false, "state_label": "Production deployment reported", "search_text": "retention purge receipt retention.purge retention-purge retention purge receipt deletion recorded against a named policy version was the deletion inside the policy window erasure receipt bound to a retention commitment scoped deletion evidence deletion instant against a declared drift bound this receipt attests only that a deletion event, evidenced by a linked prior erasure receipt, was recorded against a named retention policy at a named version whose text digest was published by a prior commitment receipt issued at or before the recorded retention start, and how the recorded deletion instant relates, under the declared drift bounds, to the window that policy version described. it does not establish that no copy of the named data exists anywhere, that backups, caches, exports, printouts, downstream recipients, or third party systems were reached, that the policy version was itself adequate for any purpose, that any rule was satisfied, or that anything was removed beyond the scope commitment recorded here. every party, object set, and scope descriptor is presented as a salted commitment, and the counts and instants are recorded as reported by the executing system. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "routing-receipt", "aliases": [], "canonical_name": "Proof-driven routing receipt", "canonical_type": "routing.receipt", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['routing.receipt']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that route_policy.policy_sha256 recomputes canonically from route_policy.policy, that route_policy.declared_at", "does_not_prove": "does not follow decision_window.opens_at, and that selected_route_id is exactly what route_policy.selection_rule and route_policy.policy would produce from the candidates array as scored against evidence_sha256 for each candidate, inside decision_window. It does not attest that the policy is well designed, that any candidate score reflects real world quality, or that the evidence snapshot behind evidence_sha256 was collected honestly.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/routing-receipt-v1.json", "mint_route": "/mint/routing", "verify_route": "/verify/routing", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/routing", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/routing", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/routing-receipt-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/routing -H 'content-type: application/json' -d @canon/examples/routing-receipt-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.441, "mint_p95_ms": 2.732, "verify_p50_ms": 1.768, "verify_p95_ms": 1.972, "iterations": 200, "artifact_bytes": 1704, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "model routing", "provider selection", "fallback path", "cost routing", "policy routed inference" ], "fit_examples": [ "OpenRouter", "Fireworks", "Cerebras", "Cloudflare" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "afir", "assembly-receipt", "stipryn" ], "operational": false, "state_label": "Production deployment reported", "search_text": "proof-driven routing receipt routing.receipt routing-receipt model routing provider selection fallback path cost routing policy routed inference openrouter fireworks cerebras cloudflare openrouter proof surface fireworks cloudflare proof surface this receipt attests that route_policy.policy_sha256 recomputes canonically from route_policy.policy, that route_policy.declared_at does not follow decision_window.opens_at, and that selected_route_id is exactly what route_policy.selection_rule and route_policy.policy would produce from the candidates array as scored against evidence_sha256 for each candidate, inside decision_window. it does not attest that the policy is well designed, that any candidate score reflects real world quality, or that the evidence snapshot behind evidence_sha256 was collected honestly. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "royalty-provenance", "aliases": [], "canonical_name": "Signed Royalty-Provenance Receipt", "canonical_type": "royalty.provenance", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['royalty.provenance']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Signed Royalty-Provenance Receipt. Attests that a work_id, a rights_holder_ref, and a caller held royalty-event digest were recorded and signed at recorded_at, and that rights_chain_verified recomputes exactly from a caller supplied delegation_receipt_supplied flag.", "does_not_prove": "It does not itself verify a rights chain cryptographically; a caller wanting a cryptographically checked chain must separately supply and verify an authority.delegation receipt, this contract only records whether one was supplied.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/royalty-provenance-v1.json", "mint_route": "/mint/royalty-provenance", "verify_route": "/verify/royalty-provenance", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/royalty-provenance", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "work_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "rights_holder_ref": "", "delegation_receipt_supplied": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/royalty-provenance", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/royalty-provenance -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"work_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"rights_holder_ref\": \"\", \"delegation_receipt_supplied\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.517, "mint_p95_ms": 2.904, "verify_p50_ms": 1.737, "verify_p95_ms": 3.496, "iterations": 200, "artifact_bytes": 1170, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "rights_chain_verified": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/model-receipts/", "use_cases": [ "royalty split", "rights chain", "content licensing", "creator payout", "media provenance" ], "fit_examples": [ "Fanatics", "Fish Audio", "Cartesia", "Circle" ], "partner_pages": [ { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" }, { "key": "cartesia-proof", "label": "Cartesia proof surface", "url": "/partners/cartesia-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "authority-delegation", "media-origin-receipt", "originproof" ], "operational": false, "state_label": "Production deployment reported", "search_text": "signed royalty-provenance receipt royalty.provenance royalty-provenance royalty split rights chain content licensing creator payout media provenance fanatics fish audio cartesia circle fanatics proof surface fish audio proof surface cartesia proof surface circle proof surface signed royalty-provenance receipt. attests that a work_id, a rights_holder_ref, and a caller held royalty-event digest were recorded and signed at recorded_at, and that rights_chain_verified recomputes exactly from a caller supplied delegation_receipt_supplied flag. it does not itself verify a rights chain cryptographically; a caller wanting a cryptographically checked chain must separately supply and verify an authority.delegation receipt, this contract only records whether one was supplied. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "s2s", "aliases": [], "canonical_name": "S2S (Silicon-to-Signature)", "canonical_type": "s2s.signature", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['s2s.signature']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "S2S, Silicon-to-Signature, receipt. Attests that an inference_id and a caller held GPU-session evidence digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that a real NVIDIA GPU hardware attestation (for example nvtrust) chain was actually checked; gpu_hardware_attestation_status is fixed to not_proven because no such hardware attestation integration exists in this repository. S2S is Silicon-to-Signature, not a speech or voice primitive, and is a distinct canonical type from afir.stream.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/s2s-signature-v1.json", "mint_route": "/mint/s2s-signature", "verify_route": "/verify/s2s-signature", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/s2s-signature", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "inference_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/s2s-signature", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/s2s-signature -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"inference_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.524, "mint_p95_ms": 2.866, "verify_p50_ms": 1.805, "verify_p95_ms": 2.066, "iterations": 200, "artifact_bytes": 1155, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "crypto_core_status": "live", "gpu_hardware_attestation_status": "not_proven" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/s2s/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/s2s/", "use_cases": [ "GPU attestation", "silicon to signature", "hardware bound inference", "compute provenance", "robot compute" ], "fit_examples": [ "Cerebras", "Fireworks", "Cisco", "Kodiak Robotics" ], "partner_pages": [ { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" } ], "related": [ "afir", "hiveseal-qpuf", "sigr-manifest" ], "operational": false, "state_label": "Production deployment reported", "search_text": "s2s (silicon-to-signature) s2s.signature s2s gpu attestation silicon to signature hardware bound inference compute provenance robot compute cerebras fireworks cisco kodiak robotics cerebras proof surface cerebras technical companion fireworks kodiak robotics proof surface s2s, silicon-to-signature, receipt. attests that an inference_id and a caller held gpu-session evidence digest were recorded and signed at recorded_at. it does not attest that a real nvidia gpu hardware attestation (for example nvtrust) chain was actually checked; gpu_hardware_attestation_status is fixed to not_proven because no such hardware attestation integration exists in this repository. s2s is silicon-to-signature, not a speech or voice primitive, and is a distinct canonical type from afir.stream. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "safety-envelope", "aliases": [ "Safety-Envelope Attestation", "Safety Envelope Receipt" ], "canonical_name": "Safety Envelope Receipt", "canonical_type": "safety.envelope", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['safety.envelope']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records that a named safety envelope was evaluated before the actuation it names, and whether the evaluated pose and force stayed inside that envelope.", "does_not_prove": "It does not prove the envelope was correct, does not prove no person was harmed, and does not prove any sensor reading was truthful.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/safety-envelope-v1.json", "mint_route": "/mint/safety-envelope", "verify_route": "/verify/safety-envelope", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/safety-envelope", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/safety-envelope", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/safety-envelope -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/safety-envelope.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "envelope checked before the arm moved", "stop proven as a decision", "speed and separation monitoring evidence", "pre effect gate on a collaborative cell", "protective stop on the record" ], "fit_examples": [], "partner_pages": [], "related": [ "agent-coalition", "effect-closure", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "safety envelope receipt safety.envelope safety-envelope safety-envelope attestation safety envelope receipt envelope checked before the arm moved stop proven as a decision speed and separation monitoring evidence pre effect gate on a collaborative cell protective stop on the record this receipt records that a named safety envelope was evaluated before the actuation it names, and whether the evaluated pose and force stayed inside that envelope. it does not prove the envelope was correct, does not prove no person was harmed, and does not prove any sensor reading was truthful. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "screening-attestation", "aliases": [], "canonical_name": "Screening Attestation Receipt", "canonical_type": "screening.attestation", "category": "typed_receipt_contract", "family": "compliance-evidence", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['screening.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that a named screening engine, at a named ruleset version bound by a ruleset digest, evaluated a keyed commitment to a counterparty identifier against one named primary reference list at a named version bound by a digest over that version's contents, together with any named supplemental lists at their own named versions and digests, at a screening instant placed against a declared external time reference with a declared drift bound, and recorded the stated verdict under a recomputed signing authority requirement together with a declared validity period measured from that screening instant.", "does_not_prove": "It does not attest that the reference list itself is complete, accurate, current as published, or free of omission, and it does not attest that the publisher of that list acted correctly. It does not decide whether the counterparty is in fact a sanctioned, restricted or prohibited party, a false negative produced by an honest screening against a correctly bound list version remains a false negative that this receipt does not detect, does not correct and does not disclose, and no gate here detects an engine that reports a clear verdict where its own matching computation produced a match. It does not assess whether the screening program as a whole is adequate, whether the ruleset thresholds are appropriately calibrated, whether the set of lists screened is the correct set for any obligation, or whether the declared validity period is short enough for any purpose. It does not identify the counterparty, does not disclose any list record, does not disclose any match score, and does not confirm that the commitment key or the window salt has remained under the custody of any particular party. It does not authorize, block, freeze, reverse or settle any transaction, does not admit or reject any counterparty, does not constitute a report or notification to any authority, does not constitute legal, regulatory or compliance advice, and whether any obligation is satisfied by the screening it records is determined solely by the applicable law and by the parties' own arrangements.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/screening-attestation-v1.json", "mint_route": "/mint/screening/attestation", "verify_route": "/verify/screening-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/screening/attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/screening-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/screening-attestation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 5.699, "mint_p95_ms": 6.54, "verify_p50_ms": 3.822, "verify_p95_ms": 4.634, "iterations": 200, "artifact_bytes": 4237, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/screening-attestation.test.mjs" ], "integration_link": "/screening-attestation/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/screening-attestation/", "use_cases": [ "sanctions screening record bound to a list version", "countersigned verdict", "reliance freshness evidence" ], "fit_examples": [ "Banks", "Card networks", "Payment processors", "Exchanges", "Handshake" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "draftkings-proof", "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/" }, { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "fanduel-proof", "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "ondo", "label": "Ondo use case", "url": "/ondo/" }, { "key": "polymarket-proof", "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "handshake-proof-layer", "label": "Handshake use case", "url": "/partners/handshake-proof-layer/" } ], "related": [ "ledger-parity", "mandate-conformance" ], "operational": false, "state_label": "Production deployment reported", "search_text": "screening attestation receipt screening.attestation screening-attestation sanctions screening record bound to a list version countersigned verdict reliance freshness evidence banks card networks payment processors exchanges handshake circle proof surface draftkings proof surface fanatics proof surface fanduel proof surface ice proof surface kalshi proof surface midfirst use case ondo use case polymarket proof surface stripe proof surface handshake use case this receipt attests that a named screening engine, at a named ruleset version bound by a ruleset digest, evaluated a keyed commitment to a counterparty identifier against one named primary reference list at a named version bound by a digest over that version's contents, together with any named supplemental lists at their own named versions and digests, at a screening instant placed against a declared external time reference with a declared drift bound, and recorded the stated verdict under a recomputed signing authority requirement together with a declared validity period measured from that screening instant. it does not attest that the reference list itself is complete, accurate, current as published, or free of omission, and it does not attest that the publisher of that list acted correctly. it does not decide whether the counterparty is in fact a sanctioned, restricted or prohibited party, a false negative produced by an honest screening against a correctly bound list version remains a false negative that this receipt does not detect, does not correct and does not disclose, and no gate here detects an engine that reports a clear verdict where its own matching computation produced a match. it does not assess whether the screening program as a whole is adequate, whether the ruleset thresholds are appropriately calibrated, whether the set of lists screened is the correct set for any obligation, or whether the declared validity period is short enough for any purpose. it does not identify the counterparty, does not disclose any list record, does not disclose any match score, and does not confirm that the commitment key or the window salt has remained under the custody of any particular party. it does not authorize, block, freeze, reverse or settle any transaction, does not admit or reject any counterparty, does not constitute a report or notification to any authority, does not constitute legal, regulatory or compliance advice, and whether any obligation is satisfied by the screening it records is determined solely by the applicable law and by the parties' own arrangements. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sequence-attestation", "aliases": [ "SA", "Sequence Attestation" ], "canonical_name": "Sequence Attestation (SA), event order bracketed by external time", "canonical_type": "sequence.attestation", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sequence.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the recorded events fold to sequence_root in exactly the recorded order, that when a lower bound is present the named public block hash was folded into that root so the root cannot have been constructed before that block existed, that when an upper bound is present the RFC 3161 token's message imprint equals sequence_root so an authority outside Hive held that root at the stated time, and that anchor_state and bracket recompute from the bounds actually present.", "does_not_prove": "It does not attest that any event is true, that any event set is complete, or that the producing system's own observed times are honest. It does not itself validate the timestamp authority's certificate chain; the complete token is carried in the receipt so an independent verifier can check that chain against the authority's published root.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sequence-attestation-v1.json", "mint_route": "/mint/sequence-attestation", "verify_route": "/verify/sequence-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sequence-attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sequence-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sequence-attestation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.54, "mint_p95_ms": 2.997, "verify_p50_ms": 2.012, "verify_p95_ms": 4.792, "iterations": 200, "artifact_bytes": 1965, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sequence-attestation.test.mjs" ], "integration_link": "/partners/ice-proof/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/partners/ice-proof/", "use_cases": [ "incident notification timeline", "detection to disclosure interval", "regulatory reporting deadline", "event ordering dispute", "outage timeline reconstruction", "audit trail time bracketing" ], "fit_examples": [ "Intercontinental Exchange", "Nasdaq", "DTCC", "FINRA member firms", "clearing houses", "market operators" ], "partner_pages": [ { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "worldpay", "label": "Worldpay use case", "url": "/partners/worldpay/" } ], "related": [ "effect-closure", "multi-source-divergence", "sigr-chain", "supersession-receipt" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sequence attestation (sa), event order bracketed by external time sequence.attestation sequence-attestation sa sequence attestation incident notification timeline detection to disclosure interval regulatory reporting deadline event ordering dispute outage timeline reconstruction audit trail time bracketing intercontinental exchange nasdaq dtcc finra member firms clearing houses market operators ice proof surface worldpay use case this receipt attests that the recorded events fold to sequence_root in exactly the recorded order, that when a lower bound is present the named public block hash was folded into that root so the root cannot have been constructed before that block existed, that when an upper bound is present the rfc 3161 token's message imprint equals sequence_root so an authority outside hive held that root at the stated time, and that anchor_state and bracket recompute from the bounds actually present. it does not attest that any event is true, that any event set is complete, or that the producing system's own observed times are honest. it does not itself validate the timestamp authority's certificate chain; the complete token is carried in the receipt so an independent verifier can check that chain against the authority's published root. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "settlement-feed", "aliases": [], "canonical_name": "Hive Settlement Feed", "canonical_type": "settlement.feed", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['settlement.feed']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Hive Settlement Feed receipt. Attests that a settlement_id, a feed_source_ref, and a caller held settlement-amount digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest that this is a settlement-specific surface distinct from a generic signer call; distinct_from_generic_signer is fixed to false pending an explicit product decision, and no regulated market endorsement or accuracy claim is made.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/settlement-feed-v1.json", "mint_route": "/mint/settlement-feed", "verify_route": "/verify/settlement-feed", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/settlement-feed", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "settlement_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "feed_source_ref": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/settlement-feed", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/settlement-feed -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"settlement_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"feed_source_ref\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.563, "mint_p95_ms": 5.788, "verify_p50_ms": 1.807, "verify_p95_ms": 2.204, "iterations": 200, "artifact_bytes": 1057, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "distinct_from_generic_signer": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/settlement-feed/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/settlement-feed/", "use_cases": [ "market settlement data", "prediction market", "sports data integrity", "oracle signing", "regulated exchange", "Circle Gateway", "crosschain USDC", "Gateway attestation", "ERC-1271" ], "fit_examples": [ "Kalshi", "FanDuel", "DraftKings", "Polymarket", "ICE", "Fanatics", "Circle" ], "partner_pages": [ { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "fanduel-proof", "label": "FanDuel proof surface", "url": "/partners/fanduel-proof/" }, { "key": "fanduel-provable-play", "label": "FanDuel provable play", "url": "/partners/fanduel-provable-play/" }, { "key": "draftkings-proof", "label": "DraftKings proof surface", "url": "/partners/draftkings-proof/" }, { "key": "polymarket-proof", "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "hahs", "multi-source-divergence", "supersession-receipt" ], "operational": false, "state_label": "Production deployment reported", "search_text": "hive settlement feed settlement.feed settlement-feed market settlement data prediction market sports data integrity oracle signing regulated exchange circle gateway crosschain usdc gateway attestation erc-1271 kalshi fanduel draftkings polymarket ice fanatics circle kalshi proof surface fanduel proof surface fanduel provable play draftkings proof surface polymarket proof surface ice proof surface fanatics proof surface circle proof surface hive settlement feed receipt. attests that a settlement_id, a feed_source_ref, and a caller held settlement-amount digest were recorded and signed at recorded_at. it does not attest that this is a settlement-specific surface distinct from a generic signer call; distinct_from_generic_signer is fixed to false pending an explicit product decision, and no regulated market endorsement or accuracy claim is made. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-bill", "aliases": [], "canonical_name": "SiGR Bill (signed inference cost or billing receipt)", "canonical_type": "sigr.bill", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.bill']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that total_micro_usd recomputes exactly from the recorded input_tokens, output_tokens, price_input_micro_usd_per_1k, and price_output_micro_usd_per_1k.", "does_not_prove": "It does not attest that the token counts are accurate, that the unit prices reflect any published or contractual price list, or that the underlying inference request actually ran.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-bill-v1.json", "mint_route": "/mint/sigr-bill", "verify_route": "/verify/sigr-bill", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-bill", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-bill", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-bill-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-bill -H 'content-type: application/json' -d @canon/examples/sigr-bill-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.721, "mint_p95_ms": 2.998, "verify_p50_ms": 2.073, "verify_p95_ms": 2.474, "iterations": 200, "artifact_bytes": 987, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "token billing", "inference cost", "usage metering", "chargeback", "cost reconciliation" ], "fit_examples": [ "Fireworks", "OpenRouter", "Cerebras", "Circle", "Snowflake" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "hive-receipt", "structural-lateration" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr bill (signed inference cost or billing receipt) sigr.bill sigr-bill token billing inference cost usage metering chargeback cost reconciliation fireworks openrouter cerebras circle snowflake fireworks openrouter proof surface cerebras proof surface circle proof surface this receipt attests that total_micro_usd recomputes exactly from the recorded input_tokens, output_tokens, price_input_micro_usd_per_1k, and price_output_micro_usd_per_1k. it does not attest that the token counts are accurate, that the unit prices reflect any published or contractual price list, or that the underlying inference request actually ran. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-bond", "aliases": [], "canonical_name": "SiGR Bond (signed SLA bond and measurement receipt)", "canonical_type": "sigr.bond", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.bond']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that breached and penalty_micro_usd recompute exactly from the recorded bond terms and the recorded measurement.", "does_not_prove": "It does not attest that the measurement was collected honestly, that the bond terms are commercially reasonable, or that any penalty is legally owed.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-bond-v1.json", "mint_route": "/mint/sigr-bond", "verify_route": "/verify/sigr-bond", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-bond", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-bond", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-bond-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-bond -H 'content-type: application/json' -d @canon/examples/sigr-bond-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.679, "mint_p95_ms": 2.977, "verify_p50_ms": 1.956, "verify_p95_ms": 2.118, "iterations": 200, "artifact_bytes": 1006, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "SLA bond", "penalty computation", "uptime guarantee", "breach evidence" ], "fit_examples": [ "Harness", "Fireworks", "Cerebras", "Cloudflare", "Cisco" ], "partner_pages": [ { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "harness", "label": "Harness use case", "url": "/harness/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "bpa-attestation", "bpa-budget" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr bond (signed sla bond and measurement receipt) sigr.bond sigr-bond sla bond penalty computation uptime guarantee breach evidence harness fireworks cerebras cloudflare cisco harness proof surface harness use case fireworks cloudflare proof surface this receipt attests that breached and penalty_micro_usd recompute exactly from the recorded bond terms and the recorded measurement. it does not attest that the measurement was collected honestly, that the bond terms are commercially reasonable, or that any penalty is legally owed. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-cachesign", "aliases": [], "canonical_name": "SiGR CacheSign (KV cache prefix signing at write time)", "canonical_type": "sigr.cachesign", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.cachesign']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that prefix_sha256 and token_span were sealed at sealed_at for the named model_id, and, when parent_ref is present, that this entry extends the exact prior sealed entry it names.", "does_not_prove": "It does not attest that the cached content is correct, was computed deterministically, or was actually reused by any later inference.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-cachesign-v1.json", "mint_route": "/mint/sigr-cachesign", "verify_route": "/verify/sigr-cachesign", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-cachesign", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-cachesign", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-cachesign-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-cachesign -H 'content-type: application/json' -d @canon/examples/sigr-cachesign-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.548, "mint_p95_ms": 2.86, "verify_p50_ms": 1.715, "verify_p95_ms": 2.044, "iterations": 200, "artifact_bytes": 962, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "KV cache integrity", "prefix reuse", "cache poisoning defence", "inference serving" ], "fit_examples": [ "Fireworks", "Cerebras", "OpenRouter", "Cloudflare" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "foretoken", "sigr-manifest" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr cachesign (kv cache prefix signing at write time) sigr.cachesign sigr-cachesign kv cache integrity prefix reuse cache poisoning defence inference serving fireworks cerebras openrouter cloudflare fireworks cerebras proof surface cerebras technical companion openrouter proof surface cloudflare proof surface this receipt attests that prefix_sha256 and token_span were sealed at sealed_at for the named model_id, and, when parent_ref is present, that this entry extends the exact prior sealed entry it names. it does not attest that the cached content is correct, was computed deterministically, or was actually reused by any later inference. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-chain", "aliases": [ "sigr" ], "canonical_name": "SiGR Chain (SiGR family flagship, a step sealed signed agent run)", "canonical_type": "sigr.chain", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.chain']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the steps array recorded in signed_body, hashed in order, recomputes to chain_root, and that the sequence was sealed at sealed_at with no step dropped, reordered, or altered afterward.", "does_not_prove": "It does not attest that any step's content is accurate, that a tool_call step actually executed against the named tool, or that the agent's final answer is correct or fit for any purpose.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-chain-v1.json", "mint_route": "/mint/sigr-chain", "verify_route": "/verify/sigr-chain", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-chain", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-chain", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-chain-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-chain -H 'content-type: application/json' -d @canon/examples/sigr-chain-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.674, "mint_p95_ms": 3.095, "verify_p50_ms": 2.008, "verify_p95_ms": 2.232, "iterations": 200, "artifact_bytes": 1507, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-imprimatur.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "agent run audit", "step sealed run", "multi step agent", "tool chain proof", "inference guarantee" ], "fit_examples": [ "Fireworks", "Cerebras", "OpenRouter", "Cisco", "Snowflake", "AIUC" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" } ], "related": [ "afir-s3", "sigr-bill", "sigr-mir" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr chain (sigr family flagship, a step sealed signed agent run) sigr.chain sigr-chain sigr agent run audit step sealed run multi step agent tool chain proof inference guarantee fireworks cerebras openrouter cisco snowflake aiuc fireworks cerebras proof surface openrouter proof surface aiuc proof surface cisco use case snowflake proof surface this receipt attests that the steps array recorded in signed_body, hashed in order, recomputes to chain_root, and that the sequence was sealed at sealed_at with no step dropped, reordered, or altered afterward. it does not attest that any step's content is accurate, that a tool_call step actually executed against the named tool, or that the agent's final answer is correct or fit for any purpose. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-consensus", "aliases": [], "canonical_name": "SiGR Consensus (signed multi-model panel receipt)", "canonical_type": "sigr.consensus", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.consensus']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that winner_seq and agreement_bp recompute exactly from the recorded members array under the declared method.", "does_not_prove": "It does not attest that any member output is correct, that the scoring method is well designed, or that the panel membership recorded here is complete.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-consensus-v1.json", "mint_route": "/mint/sigr-consensus", "verify_route": "/verify/sigr-consensus", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-consensus", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-consensus", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-consensus-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-consensus -H 'content-type: application/json' -d @canon/examples/sigr-consensus-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.728, "mint_p95_ms": 5.543, "verify_p50_ms": 2.104, "verify_p95_ms": 2.177, "iterations": 200, "artifact_bytes": 1251, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "model panel", "jury of models", "agreement scoring", "answer selection" ], "fit_examples": [ "OpenRouter", "Fireworks", "Cerebras", "Kalshi", "Snowflake" ], "partner_pages": [ { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" } ], "related": [ "evar", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr consensus (signed multi-model panel receipt) sigr.consensus sigr-consensus model panel jury of models agreement scoring answer selection openrouter fireworks cerebras kalshi snowflake openrouter proof surface fireworks cerebras proof surface kalshi proof surface this receipt attests that winner_seq and agreement_bp recompute exactly from the recorded members array under the declared method. it does not attest that any member output is correct, that the scoring method is well designed, or that the panel membership recorded here is complete. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-gca", "aliases": [], "canonical_name": "SiGR GCA (grounding claims attestation)", "canonical_type": "sigr.gca", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.gca']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that claims_root and grounded_count recompute exactly from the recorded claims array, and that a claim with support_sha256 null carries support_strength_bp of 0. It proves that each claim carries the recorded support reference and strength.", "does_not_prove": "It does not prove that any claim is factually true, that the named support passage actually supports the claim it is attached to, or that the grounding method itself is sound.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-gca-v1.json", "mint_route": "/mint/sigr-gca", "verify_route": "/verify/sigr-gca", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-gca", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-gca", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-gca-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-gca -H 'content-type: application/json' -d @canon/examples/sigr-gca-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.546, "mint_p95_ms": 2.814, "verify_p50_ms": 2.117, "verify_p95_ms": 2.241, "iterations": 200, "artifact_bytes": 1480, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "grounding attestation", "citation check", "retrieval grounding", "hallucination control" ], "fit_examples": [ "Snowflake", "Fireworks", "Cerebras", "AIUC", "Cisco" ], "partner_pages": [ { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" } ], "related": [ "evar", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr gca (grounding claims attestation) sigr.gca sigr-gca grounding attestation citation check retrieval grounding hallucination control snowflake fireworks cerebras aiuc cisco snowflake proof surface fireworks aiuc proof surface cerebras proof surface this receipt attests that claims_root and grounded_count recompute exactly from the recorded claims array, and that a claim with support_sha256 null carries support_strength_bp of 0. it proves that each claim carries the recorded support reference and strength. it does not prove that any claim is factually true, that the named support passage actually supports the claim it is attached to, or that the grounding method itself is sound. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-gitm", "aliases": [], "canonical_name": "SiGR GiTM (cross-signal anomaly flag)", "canonical_type": "sigr.gitm", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.gitm']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that triggered recomputes exactly from the five named boolean signals and trigger_bp. It asserts provenance_anomaly_pattern_observed only.", "does_not_prove": "It does not assert that anything is factually wrong, does not assert malicious intent, and does not assert that the underlying content is false or true.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-gitm-v1.json", "mint_route": "/mint/sigr-gitm", "verify_route": "/verify/sigr-gitm", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-gitm", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-gitm", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-gitm-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-gitm -H 'content-type: application/json' -d @canon/examples/sigr-gitm-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.525, "mint_p95_ms": 2.799, "verify_p50_ms": 2.07, "verify_p95_ms": 4.04, "iterations": 200, "artifact_bytes": 1031, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "anomaly flag", "cross signal detection", "drift signal", "abuse detection" ], "fit_examples": [ "Cisco", "Cloudflare", "Snowflake", "Chime", "Robinhood" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" } ], "related": [ "howler-sae", "multi-source-divergence" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr gitm (cross-signal anomaly flag) sigr.gitm sigr-gitm anomaly flag cross signal detection drift signal abuse detection cisco cloudflare snowflake chime robinhood cisco use case cloudflare proof surface chime proof surface robinhood proof surface this receipt attests that triggered recomputes exactly from the five named boolean signals and trigger_bp. it asserts provenance_anomaly_pattern_observed only. it does not assert that anything is factually wrong, does not assert malicious intent, and does not assert that the underlying content is false or true. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-manifest", "aliases": [], "canonical_name": "SiGR Manifest (streaming model manifest attestation, TEE-less)", "canonical_type": "sigr.manifest", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.manifest']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that manifest_sha256 recomputes exactly from the recorded model_id, weights_sha3, config_hash, and endpoint, at issued_at.", "does_not_prove": "It does not attest that the named endpoint is currently serving these weights, that the weights are free of vulnerabilities or backdoors, or that config_hash describes a safe or correct configuration.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-manifest-v1.json", "mint_route": "/mint/sigr-manifest", "verify_route": "/verify/sigr-manifest", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-manifest", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-manifest", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-manifest-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-manifest -H 'content-type: application/json' -d @canon/examples/sigr-manifest-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.446, "mint_p95_ms": 2.786, "verify_p50_ms": 1.918, "verify_p95_ms": 2.088, "iterations": 200, "artifact_bytes": 1164, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/sigr/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/sigr/", "use_cases": [ "model manifest", "serving weights identity", "TEE free attestation", "supply chain of models" ], "fit_examples": [ "Fireworks", "Cerebras", "OpenRouter", "Snowflake" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" } ], "related": [ "s2s", "sigr-mir" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr manifest (streaming model manifest attestation, tee-less) sigr.manifest sigr-manifest model manifest serving weights identity tee free attestation supply chain of models fireworks cerebras openrouter snowflake fireworks cerebras proof surface cerebras technical companion openrouter proof surface this receipt attests that manifest_sha256 recomputes exactly from the recorded model_id, weights_sha3, config_hash, and endpoint, at issued_at. it does not attest that the named endpoint is currently serving these weights, that the weights are free of vulnerabilities or backdoors, or that config_hash describes a safe or correct configuration. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sigr-mir", "aliases": [ "mir" ], "canonical_name": "SiGR MiR (model identity and relineage)", "canonical_type": "sigr.mir", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sigr.mir']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that lineage_root recomputes exactly from the recorded steps array, and that identity_flicker recomputes exactly from steps and expected_model. It asserts served_model_identity_and_lineage only.", "does_not_prove": "It does not assert that any step's outputs are correct, safe, or fit for any purpose, and does not assert that weights_sha3 or config_hash describe a vulnerability free model.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sigr-mir-v1.json", "mint_route": "/mint/sigr-mir", "verify_route": "/verify/sigr-mir", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sigr-mir", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sigr-mir", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/sigr-mir-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sigr-mir -H 'content-type: application/json' -d @canon/examples/sigr-mir-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.513, "mint_p95_ms": 2.859, "verify_p50_ms": 1.927, "verify_p95_ms": 2.123, "iterations": 200, "artifact_bytes": 1546, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/sigr-family.test.mjs" ], "integration_link": "/model-receipts/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/model-receipts/", "use_cases": [ "model identity", "fine tune lineage", "relineage", "checkpoint provenance", "model registry" ], "fit_examples": [ "Fireworks", "Cerebras", "OpenRouter", "Snowflake", "Mercor" ], "partner_pages": [ { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "mercor-pipeline-integrity", "label": "Mercor pipeline integrity", "url": "/partners/mercor-pipeline-integrity/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "evar", "sigr-manifest" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sigr mir (model identity and relineage) sigr.mir sigr-mir mir model identity fine tune lineage relineage checkpoint provenance model registry fireworks cerebras openrouter snowflake mercor cerebras proof surface fireworks mercor pipeline integrity openrouter proof surface snowflake proof surface stripe proof surface this receipt attests that lineage_root recomputes exactly from the recorded steps array, and that identity_flicker recomputes exactly from steps and expected_model. it asserts served_model_identity_and_lineage only. it does not assert that any step's outputs are correct, safe, or fit for any purpose, and does not assert that weights_sha3 or config_hash describe a vulnerability free model. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sls-metering", "aliases": [ "SLS Metering", "SLS Metering Receipt" ], "canonical_name": "Service Level Metering Receipt", "canonical_type": "sls.metering", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['sls.metering']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt records metered machine service units for a stated billing window, the per unit evidence that backs them, and the fraction of billed units carrying receipt bound evidence.", "does_not_prove": "It does not prove the work was performed to any standard, does not prove the customer accepted it, and does not settle payment.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/sls-metering-v1.json", "mint_route": "/mint/sls-metering", "verify_route": "/verify/sls-metering", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/sls-metering", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/sls-metering", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/sls-metering -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": null, "benchmark_withheld_reason": "This contract is deployed and its benchmark script runs in the npm run benchmark chain, but that script reports to the terminal and writes no row into hive-verifier-api/benchmarks/results-latest.json, so there is no committed measurement to carry here. Absent, not zero and not fast.", "tests": [ "test/sls-metering.test.mjs" ], "integration_link": "/machines/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/machines/", "use_cases": [ "bill 40,000 RaaS hours with proof", "evidence backed metered units", "robot as a service invoicing evidence", "per hour receipt backing", "metered unit reconciliation" ], "fit_examples": [], "partner_pages": [], "related": [ "agent-coalition", "jurisdictional-clearance", "settlement-feed" ], "operational": false, "state_label": "Production deployment reported", "search_text": "service level metering receipt sls.metering sls-metering sls metering sls metering receipt bill 40,000 raas hours with proof evidence backed metered units robot as a service invoicing evidence per hour receipt backing metered unit reconciliation this receipt records metered machine service units for a stated billing window, the per unit evidence that backs them, and the fraction of billed units carrying receipt bound evidence. it does not prove the work was performed to any standard, does not prove the customer accepted it, and does not settle payment. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "sovereign-receipt-registry", "aliases": [], "canonical_name": "Sovereign AI Receipt Registry", "canonical_type": "receipt.registry.sovereign", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['receipt.registry.sovereign']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Sovereign AI Receipt Registry receipt. Attests that a registry_entry_id, a jurisdiction_ref, and a caller held registered-receipts digest were recorded and signed at recorded_at.", "does_not_prove": "It does not attest to any actual jurisdictional or governmental authority relationship; jurisdictional_authority_confirmed is fixed to false because no such relationship is confirmed in this repository.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/receipt-registry-sovereign-v1.json", "mint_route": "/mint/receipt-registry-sovereign", "verify_route": "/verify/receipt-registry-sovereign", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/receipt-registry-sovereign", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "registry_entry_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "jurisdiction_ref": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/receipt-registry-sovereign", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/receipt-registry-sovereign -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"registry_entry_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"jurisdiction_ref\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.475, "mint_p95_ms": 2.87, "verify_p50_ms": 1.781, "verify_p95_ms": 2.157, "iterations": 200, "artifact_bytes": 1074, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "jurisdictional_authority_confirmed": false }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/hivesovereign/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/hivesovereign/", "use_cases": [ "national registry", "sovereign key custody", "government AI oversight", "country scale signing" ], "fit_examples": [ "ICE", "Cisco", "Snowflake" ], "partner_pages": [ { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "hahs", "hvvs" ], "operational": false, "state_label": "Production deployment reported", "search_text": "sovereign ai receipt registry receipt.registry.sovereign sovereign-receipt-registry national registry sovereign key custody government ai oversight country scale signing ice cisco snowflake ice proof surface sovereign ai receipt registry receipt. attests that a registry_entry_id, a jurisdiction_ref, and a caller held registered-receipts digest were recorded and signed at recorded_at. it does not attest to any actual jurisdictional or governmental authority relationship; jurisdictional_authority_confirmed is fixed to false because no such relationship is confirmed in this repository. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "stage-replay", "aliases": [ "Staged Preprocessing Chain" ], "canonical_name": "Staged Preprocessing Chain", "canonical_type": "stage.replay", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['stage.replay']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Staged Preprocessing Chain receipt. A document preprocessing chain is recorded stage by stage with contiguous order values, the parameters each stage applied, the digest of the raster it emitted, and the key of the party that operated it, so a disagreement about the output can be narrowed to one stage and one operator instead of the whole pipeline. When the caller supplies observed stage output digests, the service reports the lowest ordered stage where the observed digest first differs from the digest that was committed. A stage carrying no operator signature is reported as incomplete stage custody, which is a different finding from a difference between digests.", "does_not_prove": "It does not re-execute any stage; stages_reexecuted_by_service is fixed to false because the service never receives the rasters.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/stage-replay-v1.json", "mint_route": "/mint/stage-replay", "verify_route": "/verify/stage-replay", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/stage-replay", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "chain_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "render_profile_digest_sha256": "<64 hex chars, sha256 of your evidence>", "determinism_class_ref": "", "input_raster_digest_sha256": "<64 hex chars, sha256 of your evidence>", "output_raster_digest_sha256": "<64 hex chars, sha256 of your evidence>", "stages": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/stage-replay", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/stage-replay -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"chain_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"render_profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"determinism_class_ref\": \"\", \"input_raster_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"output_raster_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"stages\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.813, "mint_p95_ms": 6.131, "verify_p50_ms": 1.957, "verify_p95_ms": 2.283, "iterations": 200, "artifact_bytes": 3740, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "stages_reexecuted_by_service": false, "stage_count": "integer", "stage_order_contiguous": "boolean", "incomplete_stage_custody": "boolean", "observed_stage_count": "integer", "first_divergent_stage_order": "integer", "divergence_localized_to_one_stage": "boolean", "chain_terminates_at_declared_output": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "preprocessing stage attribution", "deskew denoise binarize chain", "first divergent stage", "pipeline step parameter record", "image pipeline dispute" ], "fit_examples": [], "partner_pages": [], "related": [ "determinism-class", "render-profile" ], "operational": false, "state_label": "Production deployment reported", "search_text": "staged preprocessing chain stage.replay stage-replay staged preprocessing chain preprocessing stage attribution deskew denoise binarize chain first divergent stage pipeline step parameter record image pipeline dispute staged preprocessing chain receipt. a document preprocessing chain is recorded stage by stage with contiguous order values, the parameters each stage applied, the digest of the raster it emitted, and the key of the party that operated it, so a disagreement about the output can be narrowed to one stage and one operator instead of the whole pipeline. when the caller supplies observed stage output digests, the service reports the lowest ordered stage where the observed digest first differs from the digest that was committed. a stage carrying no operator signature is reported as incomplete stage custody, which is a different finding from a difference between digests. it does not re-execute any stage; stages_reexecuted_by_service is fixed to false because the service never receives the rasters. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "stipryn", "aliases": [], "canonical_name": "Stipryn (pre-submission proof-level binding)", "canonical_type": "proof.demand", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['proof.demand']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that anchored_regions and its required_proof_level values were bound at declared_at, before the request identified by request_digest was transmitted, and that regions_sha256 recomputes canonically from anchored_regions.", "does_not_prove": "It does not attest that the request content is good, true, or complete, it does not alter or transmit the request, it does not attest that any downstream response met the required proof level, and it does not require the receiving party's cooperation to exist. The party bearing the consequence of the request retains full control of the request; this receipt only fixes, in advance, the evidentiary bar that response will later be measured against.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/proof-demand-v1.json", "mint_route": "/mint/proof-demand", "verify_route": "/verify/proof-demand", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/proof-demand", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/proof-demand", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/proof-demand-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/proof-demand -H 'content-type: application/json' -d @canon/examples/proof-demand-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.519, "mint_p95_ms": 2.874, "verify_p50_ms": 1.819, "verify_p95_ms": 2.228, "iterations": 200, "artifact_bytes": 1880, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments-2.test.mjs" ], "integration_link": "/stipryn/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/stipryn/", "use_cases": [ "proof level binding", "pre submission gate", "prompt region policy", "consequence routing", "ERC-1271", "erc1271", "Circle Gateway", "signed intent digest", "smart wallet" ], "fit_examples": [ "Cerebras", "Fireworks", "OpenRouter", "Cisco", "Circle" ], "partner_pages": [ { "key": "cerebras-canon-matching", "label": "Cerebras canon matching", "url": "/partners/cerebras-canon-matching/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "cerebras-technical-companion", "label": "Cerebras technical companion", "url": "/partners/cerebras-technical-companion/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "carnac", "proof-pre-fill", "routing-receipt" ], "operational": false, "state_label": "Production deployment reported", "search_text": "stipryn (pre-submission proof-level binding) proof.demand stipryn proof level binding pre submission gate prompt region policy consequence routing erc-1271 erc1271 circle gateway signed intent digest smart wallet cerebras fireworks openrouter cisco circle cerebras canon matching cerebras proof surface cerebras technical companion circle proof surface fireworks openrouter proof surface stripe proof surface this receipt attests that anchored_regions and its required_proof_level values were bound at declared_at, before the request identified by request_digest was transmitted, and that regions_sha256 recomputes canonically from anchored_regions. it does not attest that the request content is good, true, or complete, it does not alter or transmit the request, it does not attest that any downstream response met the required proof level, and it does not require the receiving party's cooperation to exist. the party bearing the consequence of the request retains full control of the request; this receipt only fixes, in advance, the evidentiary bar that response will later be measured against. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "structural-lateration", "aliases": [], "canonical_name": "Structural Lateration", "canonical_type": "structural.lateration", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['structural.lateration']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Structural Lateration receipt. Attests that a structure_id, a caller declared lateration_method, and an input digest set were recorded and signed at recorded_at, and that method_reproducible recomputes exactly from a caller supplied recomputed_digest_match flag.", "does_not_prove": "It does not itself independently re-run the lateration computation; a caller wanting independent recomputation must supply the same input_digest_set to their own implementation and compare.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/structural-lateration-v1.json", "mint_route": "/mint/structural-lateration", "verify_route": "/verify/structural-lateration", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/structural-lateration", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "structure_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "lateration_method": "", "recomputed_digest_match": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/structural-lateration", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/structural-lateration -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"structure_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"lateration_method\": \"\", \"recomputed_digest_match\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.494, "mint_p95_ms": 2.868, "verify_p50_ms": 1.779, "verify_p95_ms": 2.164, "iterations": 200, "artifact_bytes": 1135, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "method_reproducible": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/lateration/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/lateration/", "use_cases": [ "reproducible computation", "avoided cost metering", "residual cost", "recompute check" ], "fit_examples": [ "Harness", "Snowflake", "Fireworks", "Circle" ], "partner_pages": [ { "key": "harness-proof", "label": "Harness proof surface", "url": "/partners/harness-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" } ], "related": [ "bpa-attestation", "sigr-bill" ], "operational": false, "state_label": "Production deployment reported", "search_text": "structural lateration structural.lateration structural-lateration reproducible computation avoided cost metering residual cost recompute check harness snowflake fireworks circle harness proof surface snowflake proof surface structural lateration receipt. attests that a structure_id, a caller declared lateration_method, and an input digest set were recorded and signed at recorded_at, and that method_reproducible recomputes exactly from a caller supplied recomputed_digest_match flag. it does not itself independently re-run the lateration computation; a caller wanting independent recomputation must supply the same input_digest_set to their own implementation and compare. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "submission-attestation", "aliases": [ "filed figure attestation", "pre window figure commitment" ], "canonical_name": "Submission Attestation Receipt", "canonical_type": "submission.attestation", "category": "typed_receipt_contract", "family": "network-authority", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['submission.attestation']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Submission Attestation receipt. Attests that a set of self reported figures was fixed and signed at the recorded submission instant, before the window those figures describe opened, and that every figure carries a declared basis class.", "does_not_prove": "It does not attest that any figure is accurate, that the window later matched the figures, or that anything measured the figures, and when clock.anchor_class is issuer_clock_only the submission instant rests on the issuing service clock with no external time anchor.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/submission-attestation-v1.json", "mint_route": "/mint/submission-attestation", "verify_route": "/verify/submission-attestation", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/submission-attestation", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/submission-attestation", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/submission-attestation -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.686, "mint_p95_ms": 3.002, "verify_p50_ms": 2.033, "verify_p95_ms": 3.867, "iterations": 200, "artifact_bytes": 2476, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/submission-attestation.test.mjs" ], "integration_link": "/authority-line/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/authority-line/", "use_cases": [ "fixing self reported figures before the window they describe opens", "declaring the basis class behind each filed figure", "queue and filing administration evidence" ], "fit_examples": [ "Queue administrators", "Compliance teams", "Regulated filers", "Platform teams", "Marqeta", "Armilla" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" }, { "key": "armilla", "label": "Armilla use case", "url": "/partners/armilla/" } ], "related": [ "conduct-record", "knowledge-timestamp", "screening-attestation" ], "operational": false, "state_label": "Production deployment reported", "search_text": "submission attestation receipt submission.attestation submission-attestation filed figure attestation pre window figure commitment fixing self reported figures before the window they describe opens declaring the basis class behind each filed figure queue and filing administration evidence queue administrators compliance teams regulated filers platform teams marqeta armilla aiuc proof surface cisco use case ice proof surface midfirst use case netskope use case armilla use case submission attestation receipt. attests that a set of self reported figures was fixed and signed at the recorded submission instant, before the window those figures describe opened, and that every figure carries a declared basis class. it does not attest that any figure is accurate, that the window later matched the figures, or that anything measured the figures, and when clock.anchor_class is issuer_clock_only the submission instant rests on the issuing service clock with no external time anchor. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "supersession-receipt", "aliases": [], "canonical_name": "Correction and supersession receipt", "canonical_type": "supersession.receipt", "category": "typed_receipt_contract", "family": "typed receipts baseline", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['supersession.receipt']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt attests that the named replacement corrects the receipts named in supersedes as of effective_at, for the reason and scope stated in signed_body.", "does_not_prove": "It does not attest that the replacement content is itself correct, and it does not alter the superseded receipts, which remain independently verifiable exactly as originally signed.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/supersession-receipt-v1.json", "mint_route": "/mint/supersession", "verify_route": "/verify/supersession", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/supersession", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/supersession", "auth": "none", "body": { "receipt": "" }, "example_file": "/canon/examples/supersession-receipt-v1.example.json" }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/supersession -H 'content-type: application/json' -d @canon/examples/supersession-receipt-v1.example.json", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 2.476, "mint_p95_ms": 4.953, "verify_p50_ms": 1.812, "verify_p95_ms": 2.218, "iterations": 200, "artifact_bytes": 1301, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/proof-instruments.test.mjs" ], "integration_link": "/verify/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/verify/", "use_cases": [ "correction record", "restatement", "retraction", "data correction", "settlement correction" ], "fit_examples": [ "Kalshi", "Polymarket", "ICE", "Snowflake" ], "partner_pages": [ { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "polymarket-proof", "label": "Polymarket proof surface", "url": "/partners/polymarket-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "multi-source-divergence", "settlement-feed" ], "operational": false, "state_label": "Production deployment reported", "search_text": "correction and supersession receipt supersession.receipt supersession-receipt correction record restatement retraction data correction settlement correction kalshi polymarket ice snowflake kalshi proof surface polymarket proof surface ice proof surface this receipt attests that the named replacement corrects the receipts named in supersedes as of effective_at, for the reason and scope stated in signed_body. it does not attest that the replacement content is itself correct, and it does not alter the superseded receipts, which remain independently verifiable exactly as originally signed. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "tolerance-bond", "aliases": [ "Issue-Time Tolerance Bond", "Tolerance Bond" ], "canonical_name": "Issue-Time Tolerance Bond", "canonical_type": "tolerance.bond", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['tolerance.bond']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Issue-Time Tolerance Bond receipt. The maximum permitted distance, the metric that measures it, and the instant it was fixed are all inside the signed body, so the tolerance that governs a later comparison is settled before that comparison happens and a verifier cannot substitute a bound of its own. When the caller supplies an observed digest and an observed distance, the service recomputes the comparison outcome from the signed tolerance and reports it.", "does_not_prove": "It does not render the page, reproduce the committed render profile, or measure the distance itself; profile_reproduced_by_service and distance_measured_by_service are fixed to false because the service never receives the raster, and a party that cannot reproduce the committed profile gets an indeterminate outcome for that scope rather than an adverse one.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/tolerance-bond-v1.json", "mint_route": "/mint/tolerance-bond", "verify_route": "/verify/tolerance-bond", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/tolerance-bond", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "bond_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "render_profile_digest_sha256": "<64 hex chars, sha256 of your evidence>", "scope_ref": "", "committed_digest_sha256": "<64 hex chars, sha256 of your evidence>", "metric_id": "", "metric_version": "", "metric_units": "", "max_permitted_distance": "", "distance_fixed_at": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/tolerance-bond", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/tolerance-bond -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"bond_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"render_profile_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"scope_ref\": \"\", \"committed_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"metric_id\": \"\", \"metric_version\": \"\", \"metric_units\": \"\", \"max_permitted_distance\": \"\", \"distance_fixed_at\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.619, "mint_p95_ms": 2.997, "verify_p50_ms": 1.883, "verify_p95_ms": 2.28, "iterations": 200, "artifact_bytes": 2186, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "verifier_supplied_bound_refused": true, "profile_reproduced_by_service": false, "distance_measured_by_service": false, "comparison_outcome": "string", "tolerance_fixed_before_this_receipt": "boolean", "tolerance_denominated_in_declared_units": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "document extraction tolerance", "same value dispute", "normalized edit distance bound", "OCR accuracy threshold set in advance", "invoice field comparison", "statement reconciliation tolerance" ], "fit_examples": [], "partner_pages": [], "related": [ "divergence-attestation", "render-profile", "verdict-custody" ], "operational": false, "state_label": "Production deployment reported", "search_text": "issue-time tolerance bond tolerance.bond tolerance-bond issue-time tolerance bond tolerance bond document extraction tolerance same value dispute normalized edit distance bound ocr accuracy threshold set in advance invoice field comparison statement reconciliation tolerance issue-time tolerance bond receipt. the maximum permitted distance, the metric that measures it, and the instant it was fixed are all inside the signed body, so the tolerance that governs a later comparison is settled before that comparison happens and a verifier cannot substitute a bound of its own. when the caller supplies an observed digest and an observed distance, the service recomputes the comparison outcome from the signed tolerance and reports it. it does not render the page, reproduce the committed render profile, or measure the distance itself; profile_reproduced_by_service and distance_measured_by_service are fixed to false because the service never receives the raster, and a party that cannot reproduce the committed profile gets an indeterminate outcome for that scope rather than an adverse one. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "transparency-checkpoint", "aliases": [ "transparency checkpoint", "transparency log", "inclusion proof", "consistency proof", "append only log receipt", "certificate transparency style log", "merkle checkpoint", "timestamp anchor receipt" ], "canonical_name": "Transparency Checkpoint Receipt", "canonical_type": "transparency.checkpoint", "category": "typed_receipt_contract", "family": "provenance", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json receipts['transparency.checkpoint']: deployed true, production_ready_for_canon true, unit_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "This receipt fixes the shape of a log at one instant, not the meaning of what is in it. The witness holds no log and received no receipt bodies. What it received was an ordered list of digests, and it recomputed from them: the root, one full audit path for a named leaf, and, when a predecessor root was declared, both the prefix root and the RFC 6962 consistency proof between the two sizes. So this receipt states that the declared root really is the root of exactly those digests in exactly that order, that the named leaf really sits at the named index under it, and that the earlier root really is a prefix of this one. It also states that a public timestamp authority signed this root, with the imprint inside the token equal to the root and the token signature checked against the certificate the token carries.", "does_not_prove": "It does not chain that certificate to any trust anchor, so a relying party pins the authorities it accepts and reads the signer subject, issuer, and serial reported here to do it. It does not claim the leaves are Hive receipts, that the log is complete, that no second log exists, or that anything outside the supplied list ever happened. Nothing here is a claim about the content behind a digest.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/transparency-checkpoint-v1.json", "mint_route": "/mint/transparency-checkpoint", "verify_route": "/verify/transparency-checkpoint", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open and unauthenticated.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/transparency-checkpoint", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": null, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/transparency-checkpoint", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/verify/transparency-checkpoint -H 'content-type: application/json' -d '{\"receipt\": }'", "note": "The open verify route needs no credentials, so this is the fastest honest check. Mint fails closed with 401 when the token is missing or wrong." }, "benchmark": { "mint_p50_ms": 65.036, "mint_p95_ms": 65.341, "verify_p50_ms": 2.595, "verify_p95_ms": 3.289, "iterations": 3, "artifact_bytes": 3414, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": null, "tests": [ "test/transparency-checkpoint.test.mjs" ], "integration_link": "/transparency-log/", "source_path": "hive-verifier-api/src/typed/ plus hive-verifier-api/server.js", "page_url": "/transparency-log/", "use_cases": [ "proving one receipt sits in the log without disclosing the rest of it", "proving the log only ever grew and was never rewritten below its old prefix", "anchoring a log root to a public timestamp authority that has nothing to do with Hive", "refusing a checkpoint whose root does not recompute from the leaves it names", "refusing a timestamp token that was stamped over some other root", "showing an auditor the shape of a receipt set without handing them the set" ], "fit_examples": [ "Banks and exchanges", "Insurers and reinsurers", "Auditors and assurance firms", "Regulated AI vendors", "Legal and compliance teams", "Plaintiff and defence experts" ], "partner_pages": [ { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" } ], "related": [ "capture-commitment", "knowledge-timestamp", "originproof", "proof-transition", "sigr-chain" ], "operational": false, "state_label": "Production deployment reported", "search_text": "transparency checkpoint receipt transparency.checkpoint transparency-checkpoint transparency checkpoint transparency log inclusion proof consistency proof append only log receipt certificate transparency style log merkle checkpoint timestamp anchor receipt proving one receipt sits in the log without disclosing the rest of it proving the log only ever grew and was never rewritten below its old prefix anchoring a log root to a public timestamp authority that has nothing to do with hive refusing a checkpoint whose root does not recompute from the leaves it names refusing a timestamp token that was stamped over some other root showing an auditor the shape of a receipt set without handing them the set banks and exchanges insurers and reinsurers auditors and assurance firms regulated ai vendors legal and compliance teams plaintiff and defence experts fish audio proof surface this receipt fixes the shape of a log at one instant, not the meaning of what is in it. the witness holds no log and received no receipt bodies. what it received was an ordered list of digests, and it recomputed from them: the root, one full audit path for a named leaf, and, when a predecessor root was declared, both the prefix root and the rfc 6962 consistency proof between the two sizes. so this receipt states that the declared root really is the root of exactly those digests in exactly that order, that the named leaf really sits at the named index under it, and that the earlier root really is a prefix of this one. it also states that a public timestamp authority signed this root, with the imprint inside the token equal to the root and the token signature checked against the certificate the token carries. it does not chain that certificate to any trust anchor, so a relying party pins the authorities it accepts and reads the signer subject, issuer, and serial reported here to do it. it does not claim the leaves are hive receipts, that the log is complete, that no second log exists, or that anything outside the supplied list ever happened. nothing here is a claim about the content behind a digest. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "verdict-custody", "aliases": [ "Verdict Custody Declaration" ], "canonical_name": "Verdict Custody Declaration", "canonical_type": "verdict.custody", "category": "typed_receipt_contract", "family": "honesty boundary contracts", "implementation_state": "production_deployed", "state_source": "hive-verifier-api/PRODUCTION_MANIFEST.json honesty_receipts['verdict.custody']: deployed true, production_ready_for_canon true, unit_tested true, adversarially_tested true, smoke_tested true, generated_at 2026-09-03T05:38:21.652Z from a live check of https://thehiveryiq.com/v1.", "reconciliation_note": null, "proves": "Verdict Custody Declaration receipt. It names, inside the signed body, which fields of an issued receipt the issuing service computes and which fields the party requesting issuance may set, and the service recomputes whether those two sets overlap. An overlap is reported as a count and a boolean, so a claim that a verdict is service-held is checkable rather than asserted.", "does_not_prove": "It does not inspect any other receipt to confirm the declared split was actually enforced there; enforcement_confirmed_on_other_receipts is fixed to false because this receipt only carries the declaration.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/verdict-custody-v1.json", "mint_route": "/mint/verdict-custody", "verify_route": "/verify/verdict-custody", "host": "https://thehiveryiq.com/v1", "auth_required": "Mint requires Authorization: Bearer HIVE_TYPED_MINT_TOKEN and fails closed. Verify is open. Every verdict field is service computed and pinned by schema const, so a caller cannot request a stronger verdict.", "example_request": { "method": "POST", "url": "https://thehiveryiq.com/v1/mint/verdict-custody", "auth": "Authorization: Bearer $HIVE_TYPED_MINT_TOKEN", "body": { "custody_id": "your-subject-id", "evidence_digest_sha256": "<64 hex chars, sha256 of your evidence>", "subject_receipt_type": "", "service_computed_field_names": "", "caller_settable_field_names": "" }, "open_verify": { "method": "POST", "url": "https://thehiveryiq.com/v1/verify/verdict-custody", "auth": "none", "body": { "receipt": "" }, "example_file": null }, "curl": "curl -sS -X POST https://thehiveryiq.com/v1/mint/verdict-custody -H 'content-type: application/json' -H \"authorization: Bearer $HIVE_TYPED_MINT_TOKEN\" -d '{\"custody_id\": \"your-subject-id\", \"evidence_digest_sha256\": \"<64 hex chars, sha256 of your evidence>\", \"subject_receipt_type\": \"\", \"service_computed_field_names\": \"\", \"caller_settable_field_names\": \"\"}'", "note": "Mint fails closed with 401 when the token is missing or wrong and 503 when the signer is not configured." }, "benchmark": { "mint_p50_ms": 2.606, "mint_p95_ms": 5.426, "verify_p50_ms": 1.886, "verify_p95_ms": 2.188, "iterations": 200, "artifact_bytes": 1576, "measured_at": "2026-08-16T02:19:11.262Z", "measured_commit": "fac87fd0059c6ffa9000393e053bb7b78953dbf2", "source_file": "hive-verifier-api/benchmarks/results-latest.json", "caveat": "Local harness measurement on one machine and one Node version. It is a reproducible measurement of this code, not a production latency guarantee." }, "benchmark_withheld_reason": "A local latency number exists in the benchmark file, but this type has no deployment record, so no benchmark is shown next to it.", "verdict_ceiling": { "enforcement_confirmed_on_other_receipts": false, "service_computed_field_count": "integer", "caller_settable_field_count": "integer", "overlapping_field_count": "integer", "field_sets_disjoint": "boolean" }, "tests": [ "hive-verifier-api/test/honesty-contracts.test.mjs", "hive-verifier-api/test/honesty-evidence-registry.test.mjs" ], "integration_link": "/afir-ocr/", "source_path": "hive-verifier-api/src/typed/honesty-contracts-registry.js and hive-verifier-api/src/typed/honesty-contract.js", "page_url": "/afir-ocr/", "use_cases": [ "which fields the service computes", "caller settable field disclosure", "self describing receipt custody", "audit of receipt authorship" ], "fit_examples": [], "partner_pages": [], "related": [ "divergence-attestation", "tolerance-bond" ], "operational": false, "state_label": "Production deployment reported", "search_text": "verdict custody declaration verdict.custody verdict-custody verdict custody declaration which fields the service computes caller settable field disclosure self describing receipt custody audit of receipt authorship verdict custody declaration receipt. it names, inside the signed body, which fields of an issued receipt the issuing service computes and which fields the party requesting issuance may set, and the service recomputes whether those two sets overlap. an overlap is reported as a count and a boolean, so a claim that a verdict is service-held is checkable rather than asserted. it does not inspect any other receipt to confirm the declared split was actually enforced there; enforcement_confirmed_on_other_receipts is fixed to false because this receipt only carries the declaration. typed_receipt_contract deployed in production", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "afir", "canonical_name": "Attested Fragmented Inference Routing (AFIR)", "canonical_type": "afir.route", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md section 5: GET https://srotzin--afir-cern-afir-api.modal.run/health returned 200 reporting afir-1.2.13 with ML-DSA-65. Section 4 note 4 records that four Modal app names exist in one private repository and only afir-cern was confirmed live.", "proves": "Decomposes a model request into signed routable sub tasks, executes fragments concurrently and returns a verifiable commitment over the fragment set, signed with ML-DSA-65.", "does_not_prove": "It does not prove any provider executed a fragment faithfully beyond what the returned commitment covers, it has no test files in its own repository, and only one of its four Modal app names was confirmed reachable.", "host": "https://srotzin--afir-cern-afir-api.modal.run", "verify_route": "GET https://srotzin--afir-cern-afir-api.modal.run/health", "mint_route": null, "auth_required": "Health read is open. Routing operations are gated by the Modal deployment, not by this repository.", "schema_url": null, "example_request": { "method": "GET", "url": "https://srotzin--afir-cern-afir-api.modal.run/health", "auth": "none", "body": null, "note": "Version string should read afir-1.2.13 or later. Confirm before citing AFIR as live." }, "integration_link": "/afir/", "source_path": "afir/modal_app.py and afir/afir_fm.py are committed in this repository; the deployed app also has a private srotzin/afir repository.", "page_url": "/afir/", "use_cases": [ "fragmented inference", "private inference routing", "sub task signing", "concurrent fragments", "post quantum routing" ], "fit_examples": [ "Fireworks", "Cerebras", "OpenRouter", "Cisco" ], "partner_pages": [ { "key": "fireworks", "label": "Fireworks", "url": "/partners/fireworks/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" }, { "key": "openrouter-proof", "label": "OpenRouter proof surface", "url": "/partners/openrouter-proof/" } ], "related": [ "afir-ocr-docproof", "routing-receipt", "s2s" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "attested fragmented inference routing (afir) afir.route afir fragmented inference private inference routing sub task signing concurrent fragments post quantum routing fireworks cerebras openrouter cisco fireworks cerebras proof surface openrouter proof surface decomposes a model request into signed routable sub tasks, executes fragments concurrently and returns a verifiable commitment over the fragment set, signed with ml-dsa-65. it does not prove any provider executed a fragment faithfully beyond what the returned commitment covers, it has no test files in its own repository, and only one of its four modal app names was confirmed reachable. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "amplihive", "canonical_name": "AmpliHive", "canonical_type": "amplify.certified_call", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "Live probe of https://receipts.thehiveryiq.com on 2026-08-06. GET /v1/amplify/selftest returned 200. GET /openapi.json lists nine amplify paths: /v1/amplify/bench, /call, /corpus/append, /corpus/retrieve, /corpus/stats, /selftest, /sign, /verify, /wrap-receipt. GET /v1/amplify/bench returned a real measured run reporting prompt_tokens 41 before compression and 23 after, cert_alg ML-DSA-65 with a signature prefix present. GET /v1/amplify/corpus/stats returned total_rows 44 across 19 tenants at embed_dim 256.", "proves": "That a prompt was compressed before it reached a model, by how much, and that the resulting call and its response were signed with ML-DSA-65 under a key the caller can check. It wraps an ordinary model call in a certified envelope, so a party who was not present can confirm what was actually sent, what came back, and that neither was edited afterwards.", "does_not_prove": "It does not prove the model's answer is correct, and it does not prove compression preserved meaning. Compression is measured on tokens, not on semantics, and a caller who needs semantic equivalence must establish that separately. The baseline leg of GET /v1/amplify/bench depends on an upstream provider call which returned HTTP 402 on the 2026-08-06 probe, so on that probe the token reduction figure is real and the paired response side comparison was not exercised. The backend is not vendored into this repository, so no repository level implementation state can be shown for it here.", "host": "https://receipts.thehiveryiq.com", "verify_route": "POST https://receipts.thehiveryiq.com/v1/amplify/verify", "mint_route": "POST https://receipts.thehiveryiq.com/v1/amplify/sign", "auth_required": "GET /v1/amplify/selftest, /bench and /corpus/stats are open reads. Signing, calling and corpus append are gated by the service's own policy, not by this repository.", "schema_url": null, "example_request": { "method": "GET", "url": "https://receipts.thehiveryiq.com/v1/amplify/selftest" }, "integration_link": null, "source_path": null, "page_url": "/amplihive/", "use_cases": [ "prompt compression accounting", "certified model call", "inference cost reduction evidence", "signed request and response pair" ], "fit_examples": [ "Intercontinental Exchange", "Harness", "Snowflake", "Cerebras" ], "partner_pages": [ { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "routing-receipt", "sigr-bill", "sigr-chain" ], "aliases": [ "AmpliHive" ], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "amplihive amplify.certified_call amplihive amplihive prompt compression accounting certified model call inference cost reduction evidence signed request and response pair intercontinental exchange harness snowflake cerebras ice proof surface that a prompt was compressed before it reached a model, by how much, and that the resulting call and its response were signed with ml-dsa-65 under a key the caller can check. it wraps an ordinary model call in a certified envelope, so a party who was not present can confirm what was actually sent, what came back, and that neither was edited afterwards. it does not prove the model's answer is correct, and it does not prove compression preserved meaning. compression is measured on tokens, not on semantics, and a caller who needs semantic equivalence must establish that separately. the baseline leg of get /v1/amplify/bench depends on an upstream provider call which returned http 402 on the 2026-08-06 probe, so on that probe the token reduction figure is real and the paired response side comparison was not exercised. the backend is not vendored into this repository, so no repository level implementation state can be shown for it here. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "canon-tiers", "canonical_name": "Canon tiered solution view", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "Pages under canon/tiers/ in this repository, generated against /assets/canon-tiers.json. It renders curated tiering over existing entries and adds no endpoint and no receipt type.", "proves": "Nothing on its own. It ranks the canon by tier, revenue pool, speed to first dollar and who owns the budget, and it names the target companies recorded for each entry.", "does_not_prove": "Every figure on it is a recorded estimate with its source linked, not booked revenue, and any price shown is marked PROPOSED.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/canon/tiers/", "source_path": "Pages under canon/tiers/ and assets/canon-tiers.json in this repository.", "page_url": "/canon/tiers/", "use_cases": [ "tier", "biggest revenue", "fastest to revenue", "who needs it now", "target companies", "price sheet", "roi" ], "fit_examples": [ "Circle", "Cisco", "Snowflake" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "bitgo", "label": "BitGo use case", "url": "/bitgo/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "equinix", "label": "Equinix use case", "url": "/equinix/" }, { "key": "harness", "label": "Harness use case", "url": "/harness/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "midfirst", "label": "MidFirst use case", "url": "/midfirst/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "carnac", "carnac-director" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "canon tiered solution view canon-tiers tier biggest revenue fastest to revenue who needs it now target companies price sheet roi circle cisco snowflake aiuc proof surface bitgo use case circle proof surface cisco use case equinix use case harness use case ice proof surface midfirst use case snowflake proof surface stripe proof surface nothing on its own. it ranks the canon by tier, revenue pool, speed to first dollar and who owns the budget, and it names the target companies recorded for each entry. every figure on it is a recorded estimate with its source linked, not booked revenue, and any price shown is marked proposed. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "carnac", "canonical_name": "Carnac control plane and Arrival Countersignature", "canonical_type": "gateway.countersignature", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-source-of-truth-reconciliation.md section 4.4 records Carnac hosted live inside Hive Receipt as a proof demand and routing subsystem with deterministic classification and ML-DSA-65 sibling signatures; canon-repository-live-service-audit.md section 1 confirms the reference core repository carnac-core-private exists with no public endpoint by design.", "proves": "Labels requests at origin and countersigns them at arrival by comparing the approved action tuple against the delivered action tuple. Deterministic classification with a seven response routing table.", "does_not_prove": "There is no public mint route by design, so no one outside the deployment can produce a Carnac countersignature. The reference core repository is private and unreadable from outside.", "host": "https://inkframe.thehiveryiq.com", "verify_route": "GET https://inkframe.thehiveryiq.com/health", "mint_route": null, "auth_required": "No public mint route by design. Gateway operations are internal to the deployment.", "schema_url": null, "example_request": { "method": "GET", "url": "https://inkframe.thehiveryiq.com/health", "auth": "none", "body": null, "note": "Carnac is hosted inside Hive Receipt. There is deliberately no public countersignature mint route." }, "integration_link": "/carnac/", "source_path": "Private repository srotzin/carnac-core-private, plus the committed reference harness under carnac-gateway-core/ in this repository.", "page_url": "/carnac/", "use_cases": [ "arrival countersignature", "gateway check", "approved versus delivered", "prompt labelling", "consequence routing" ], "fit_examples": [ "Circle", "Cisco", "Postman", "Cloudflare" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "inkframe-v1", "proof-pre-fill", "stipryn" ], "aliases": [ "arrival-countersignature" ], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "carnac control plane and arrival countersignature gateway.countersignature carnac arrival-countersignature arrival countersignature gateway check approved versus delivered prompt labelling consequence routing circle cisco postman cloudflare circle proof surface cisco use case postman proof surface cloudflare proof surface labels requests at origin and countersigns them at arrival by comparing the approved action tuple against the delivered action tuple. deterministic classification with a seven response routing table. there is no public mint route by design, so no one outside the deployment can produce a carnac countersignature. the reference core repository is private and unreadable from outside. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "carnac-director", "canonical_name": "Carnac Director", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "Pages under carnac/director/ in this repository. The selector reads /assets/canon-tiers.json and /canon/registry/hive-canon-registry.json in the browser and ranks existing entries. It adds no endpoint and no receipt type.", "proves": "Nothing on its own. You describe what you do and what you need, and it returns the registry entries that match, with the deploy path recorded for each one.", "does_not_prove": "It cannot mint or verify anything. The ranking is a deterministic client side score over registry text, not a decision about your deployment.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable. Nothing is sent anywhere, the match runs in your browser.", "schema_url": null, "example_request": null, "integration_link": "/carnac/director/", "source_path": "Pages under carnac/director/ in this repository.", "page_url": "/carnac/director/", "use_cases": [ "deployment selector", "which primitive do I need", "free text intake", "primitive matching", "deploy path" ], "fit_examples": [ "Circle", "Cisco", "Snowflake" ], "partner_pages": [], "related": [ "canon-tiers", "carnac" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "carnac director carnac-director deployment selector which primitive do i need free text intake primitive matching deploy path circle cisco snowflake nothing on its own. you describe what you do and what you need, and it returns the registry entries that match, with the deploy path recorded for each one. it cannot mint or verify anything. the ranking is a deterministic client side score over registry text, not a decision about your deployment. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "carnac-gateway", "canonical_name": "Carnac Gateway", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "Surface of the Carnac control plane entry, which canon-source-of-truth-reconciliation.md section 4.4 records as hosted live inside Hive Receipt as a proof demand and routing subsystem with no public mint route by design. This page is a product surface over that subsystem and has no endpoint of its own.", "proves": "One integration point. You send inference through it once and it shows that the approved instruction is the instruction that arrived.", "does_not_prove": "It has no endpoint of its own and no public mint route. Nobody outside the deployment can produce a Carnac countersignature.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "No public mint route by design. Gateway operations are internal to the deployment.", "schema_url": null, "example_request": null, "integration_link": "/carnac/gateway/", "source_path": "Pages under carnac/gateway/ in this repository. Reference harness under carnac-gateway-core/ in this repository, private core srotzin/carnac-core-private.", "page_url": "/carnac/gateway/", "use_cases": [ "one integration point", "gateway check", "approved versus delivered", "proven inference", "arrival check" ], "fit_examples": [ "Circle", "Cisco", "Postman", "Cloudflare" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" }, { "key": "cloudflare", "label": "Cloudflare proof surface", "url": "/partners/cloudflare/" } ], "related": [ "carnac", "stipryn" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "carnac gateway carnac-gateway one integration point gateway check approved versus delivered proven inference arrival check circle cisco postman cloudflare circle proof surface cisco use case postman proof surface cloudflare proof surface one integration point. you send inference through it once and it shows that the approved instruction is the instruction that arrived. it has no endpoint of its own and no public mint route. nobody outside the deployment can produce a carnac countersignature. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "carnac-governance", "canonical_name": "Carnac Governance", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "Surface of the Carnac control plane entry, which canon-source-of-truth-reconciliation.md section 4.4 records as hosted live inside Hive Receipt as a proof demand and routing subsystem with no public mint route by design. This page is a product surface over that subsystem and has no endpoint of its own.", "proves": "Nothing on its own. It is the policy, escalation and audit surface over the receipts other entries emit, so your risk and compliance teams can see what was escalated and why.", "does_not_prove": "It has no endpoint and no receipt type of its own, and it is not a control that blocks an effect. The receipt is emitted by the instrument, not by this surface.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/carnac/governance/", "source_path": "Pages under carnac/governance/ in this repository.", "page_url": "/carnac/governance/", "use_cases": [ "policy", "escalation", "audit trail", "govern the effect", "review queue" ], "fit_examples": [ "Cisco", "Snowflake", "Netskope" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "netskope", "label": "Netskope use case", "url": "/netskope/" } ], "related": [ "carnac", "carnac-gateway" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "carnac governance carnac-governance policy escalation audit trail govern the effect review queue cisco snowflake netskope cisco use case netskope use case nothing on its own. it is the policy, escalation and audit surface over the receipts other entries emit, so your risk and compliance teams can see what was escalated and why. it has no endpoint and no receipt type of its own, and it is not a control that blocks an effect. the receipt is emitted by the instrument, not by this surface. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hahs", "canonical_name": "HAHS (hashes as histories)", "canonical_type": "audit.hashhistory", "category": "external_operational_service", "implementation_state": "external_service_claimed_not_reprobed", "state_source": "canon-source-of-truth-reconciliation.md section 4.5 records GET /v1/audit/pubkey live at hivetrust.hiveagentiq.com from a prior audit. canon-repository-live-service-audit.md sections 1 and 3.9 found no runtime service repository under this name; hive-trust-spec is a Lean 4 formal proof repository whose Lean Build CI passes, not an endpoint.", "proves": "Signs and verifies a contiguous hash chain of an entity's history against a live public key endpoint. A separate Lean 4 formal proof layer exists for the underlying claims.", "does_not_prove": "The runtime host was not re probed in either current audit pass, and the formal proof repository is not an operational endpoint. Formal proofs do not demonstrate that the deployed service behaves as proved.", "host": "https://hivetrust.hiveagentiq.com", "verify_route": "GET https://hivetrust.hiveagentiq.com/v1/audit/pubkey", "mint_route": null, "auth_required": "Public key read is open per the prior audit. Re probe before relying on it.", "schema_url": null, "example_request": { "method": "GET", "url": "https://hivetrust.hiveagentiq.com/v1/audit/pubkey", "auth": "none", "body": null, "note": "Not re probed in the current audit passes. Treat as claimed, not verified." }, "integration_link": "/canon/hahs/", "source_path": "Formal layer: public repository srotzin/hive-trust-spec (Lean 4). No runtime service repository identified.", "page_url": "/canon/hahs/", "use_cases": [ "hash chain", "history anchor", "append only audit", "byte for byte check", "settlement anchor" ], "fit_examples": [ "Kalshi", "ICE", "Snowflake", "Circle" ], "partner_pages": [ { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "settlement-feed", "shod", "smsh" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, claimed, not re probed", "search_text": "hahs (hashes as histories) audit.hashhistory hahs hash chain history anchor append only audit byte for byte check settlement anchor kalshi ice snowflake circle kalshi proof surface ice proof surface snowflake proof surface circle proof surface signs and verifies a contiguous hash chain of an entity's history against a live public key endpoint. a separate lean 4 formal proof layer exists for the underlying claims. the runtime host was not re probed in either current audit pass, and the formal proof repository is not an operational endpoint. formal proofs do not demonstrate that the deployed service behaves as proved. external_operational_service external service, claimed, not re probed", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hive-customer-console", "canonical_name": "Hive Customer Console", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md section 4.6 found no console specific API. canon-repository-live-service-audit.md section 3.7 found that the public HAHS verifier repository it references, srotzin/hive-verifier, is an explicit placeholder stub with a declared test script but zero test files.", "proves": "Nothing on its own. It aggregates other services' views.", "does_not_prove": "It has no API of its own, and the verifier repository it points engineers toward is a stub, not a working verifier.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/app/", "source_path": "Pages under app/ in this repository. Referenced repository srotzin/hive-verifier is a placeholder stub.", "page_url": "/app/", "use_cases": [ "dashboard", "console", "aggregation view" ], "fit_examples": [ "Cisco", "Snowflake" ], "partner_pages": [], "related": [ "hive-passport", "typed-signer" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "hive customer console hive-customer-console dashboard console aggregation view cisco snowflake nothing on its own. it aggregates other services' views. it has no api of its own, and the verifier repository it points engineers toward is a stub, not a working verifier. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hive-ledger", "canonical_name": "Hive Ledger", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md section 4.6: the page now exists on disk, resolving a prior broken link, but it remains a composite ledger surface rather than a receipt issuing primitive.", "proves": "Nothing on its own. It presents ledger style views over other primitives' receipts.", "does_not_prove": "It issues no receipt type and has no endpoint of its own.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/hive-ledger/", "source_path": "Pages under hive-ledger/ in this repository.", "page_url": "/hive-ledger/", "use_cases": [ "ledger view", "receipt accounting", "economic evidence" ], "fit_examples": [ "Circle", "Chime", "Snowflake" ], "partner_pages": [ { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" } ], "related": [ "hive-receipt", "proof-credit", "sigr-bill" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "hive ledger hive-ledger ledger view receipt accounting economic evidence circle chime snowflake chime proof surface circle proof surface stripe proof surface mastercard use case nothing on its own. it presents ledger style views over other primitives' receipts. it issues no receipt type and has no endpoint of its own. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hive-passport", "canonical_name": "Hive Passport", "canonical_type": null, "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md sections 3.5 and 5: GET https://passport.thehiveryiq.com/health and /v1/registry/manifest returned 200 with layers 1 to 4 active and layer 5 honestly reserved. Section 6 records that the repository's own npm test fails immediately because the declared tests directory does not exist.", "proves": "Registry and manifest service with layers 1 to 4 active. It also carries its own zone based Imprimatur pre attestation gate, which is functionally distinct from the SiGR family imprimatur.clearance type.", "does_not_prove": "It has no working committed test infrastructure at the live commit, so no test evidence backs the deployed behaviour. Its Imprimatur gate is a third distinct meaning of that name and must not be conflated with the SiGR type or the concept page.", "host": "https://passport.thehiveryiq.com", "verify_route": "GET https://passport.thehiveryiq.com/v1/registry/manifest", "mint_route": null, "auth_required": "Health and manifest reads are open. Registry writes are gated by the service.", "schema_url": null, "example_request": { "method": "GET", "url": "https://passport.thehiveryiq.com/v1/registry/manifest", "auth": "none", "body": null, "note": "Layer 5 reports reserved. Do not read reserved as active." }, "integration_link": "/verify/", "source_path": "Private repository srotzin/hive-passport. Not vendored into this repository.", "page_url": "/verify/", "use_cases": [ "issuer registry", "key manifest", "zone clearance", "passport layers", "trust registry" ], "fit_examples": [ "Cisco", "Circle", "ICE", "Snowflake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "imprimatur", "typed-signer" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "hive passport hive-passport issuer registry key manifest zone clearance passport layers trust registry cisco circle ice snowflake cisco use case circle proof surface registry and manifest service with layers 1 to 4 active. it also carries its own zone based imprimatur pre attestation gate, which is functionally distinct from the sigr family imprimatur.clearance type. it has no working committed test infrastructure at the live commit, so no test evidence backs the deployed behaviour. its imprimatur gate is a third distinct meaning of that name and must not be conflated with the sigr type or the concept page. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "hive-receipt", "canonical_name": "Hive Receipt (x402 and Base USDC settlement service)", "canonical_type": "receipt.settlement", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md sections 3.3 and 5: GET https://inkframe.thehiveryiq.com/health returned 200, the live primitives smoke run was 9/9, hive-receipt.onrender.com serves the identical service, and the public srotzin/hive-receipt repository's own test run was 165 tests, 0 failed.", "proves": "Payment receipt and x402 settlement service for Spectral signed Base USDC receipts, on chain verification and MCP accessible receipt operations. It also hosts the live InkFrame verbs and the Carnac routing subsystem.", "does_not_prove": "It does not prove any customer volume, and it is a distinct host from the typed receipts API. Payment settlement is not a correctness claim about the work being paid for.", "host": "https://inkframe.thehiveryiq.com", "verify_route": "GET https://inkframe.thehiveryiq.com/health", "mint_route": "POST https://inkframe.thehiveryiq.com/v1/receipt/emit", "auth_required": "Health is open. Emission returns a real x402 payment_required challenge; x402 is the only payment rail.", "schema_url": null, "example_request": { "method": "GET", "url": "https://inkframe.thehiveryiq.com/v1/primitives/smoke", "auth": "none", "body": null, "note": "The live primitives smoke route reports its own pass count. It was 9/9 at the audited session." }, "integration_link": "/receipts/", "source_path": "Public repository srotzin/hive-receipt. Not vendored into this repository.", "page_url": "/receipts/", "use_cases": [ "x402", "Base USDC", "stablecoin settlement", "agent payment", "wallet intent", "activation key", "agentic commerce" ], "fit_examples": [ "Circle", "Chime", "Robinhood", "FanDuel", "Kalshi" ], "partner_pages": [ { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "carnac", "effect-closure", "inkframe-v1" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "hive receipt (x402 and base usdc settlement service) receipt.settlement hive-receipt x402 base usdc stablecoin settlement agent payment wallet intent activation key agentic commerce circle chime robinhood fanduel kalshi chime proof surface circle proof surface robinhood proof surface stripe proof surface payment receipt and x402 settlement service for spectral signed base usdc receipts, on chain verification and mcp accessible receipt operations. it also hosts the live inkframe verbs and the carnac routing subsystem. it does not prove any customer volume, and it is a distinct host from the typed receipts api. payment settlement is not a correctness claim about the work being paid for. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "inkframe-v1", "canonical_name": "InkFrame v1", "canonical_type": "inkframe.v1", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md sections 3.3 and 3.9: the /v1/inkframe/* verbs are served live by hive-receipt at inkframe.thehiveryiq.com and the inkframe-core repository's own custom test runner passed 26/26 this session.", "proves": "Content addressed substrate for pre effect receipts: frame, prefill, cue edge, replay and countersign verbs over RFC 8785 JCS with SHA-256 and Ed25519 or ML-DSA-65.", "does_not_prove": "It is hosted inside Hive Receipt, not the typed receipts API, so its verbs must never be described as part of that API. Its source repository is private.", "host": "https://inkframe.thehiveryiq.com", "verify_route": "GET https://inkframe.thehiveryiq.com/health", "mint_route": "POST https://inkframe.thehiveryiq.com/v1/inkframe/frame", "auth_required": "Health and smoke reads are open. Frame writing is gated by the external service.", "schema_url": null, "example_request": { "method": "GET", "url": "https://inkframe.thehiveryiq.com/health", "auth": "none", "body": null, "note": "InkFrame verbs live under /v1/inkframe/* on this host, not on the typed receipt service at thehiveryiq.com/v1." }, "integration_link": "/carnac-live-ink/", "source_path": "Private repository srotzin/inkframe-core. Not vendored into this repository.", "page_url": "/carnac-live-ink/", "use_cases": [ "pre effect receipt", "content addressed frame", "cue edge", "countersign", "replay" ], "fit_examples": [ "Circle", "Postman", "Cisco" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" } ], "related": [ "carnac", "inkframe-non-mutation", "proof-pre-fill" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "inkframe v1 inkframe.v1 inkframe-v1 pre effect receipt content addressed frame cue edge countersign replay circle postman cisco circle proof surface postman proof surface content addressed substrate for pre effect receipts: frame, prefill, cue edge, replay and countersign verbs over rfc 8785 jcs with sha-256 and ed25519 or ml-dsa-65. it is hosted inside hive receipt, not the typed receipts api, so its verbs must never be described as part of that api. its source repository is private. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "mcp-relay-layer", "canonical_name": "Hive MCP relay layer", "canonical_type": null, "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "Re-probed live on 2026-08-04T21:07:00Z: GET returned 200 at https://hive-mcp-sigr.onrender.com/health, https://hive-mcp-spire.onrender.com/health, https://hive-mcp-imprimatur.onrender.com/health, https://hive-mcp-passport.onrender.com/health, https://hive-mcp-vault.onrender.com/health, https://hive-mcp-swap.onrender.com/health and https://hive-mcp-receipts.onrender.com/health, all seven of the current hive-mcp-* hosted relays. This supersedes the prior canon-repository-live-service-audit.md finding that five of six were unreachable. Local test and smoke runs for the relay repositories continue to pass, for example hive-mcp-sigr 20/20 and hive-mcp-spire 47/47.", "proves": "A set of MCP relay services that forward tool calls to the real signer and passport hosts. All seven hosted health endpoints answered 200 in this probe, and their local test and smoke suites pass, including live upstream round trips.", "does_not_prove": "A 200 on a health route proves the relay process is up and reachable at that host, not that every MCP tool call it forwards succeeds end to end, and not that any upstream primitive it calls is itself authenticated and production accepting. Probe the specific tool call you depend on before relying on it.", "host": "https://hive-mcp-sigr.onrender.com", "verify_route": "GET https://hive-mcp-.onrender.com/health for name in sigr, spire, imprimatur, passport, vault, swap, receipts", "mint_route": null, "auth_required": "Health reads are open on all seven relays. Tool calls follow the MCP transport of each relay.", "schema_url": null, "example_request": { "method": "GET", "url": "https://hive-mcp-sigr.onrender.com/health", "auth": "none", "body": null, "note": "All seven relays answered 200 on this probe. Re-probe the specific relay you depend on before a production integration, since this is a point in time health check, not a standing guarantee." }, "integration_link": "/typed-signer/", "source_path": "Public repositories srotzin/hive-mcp-sigr, hive-mcp-spire, hive-mcp-imprimatur, hive-mcp-passport, hive-mcp-vault, hive-mcp-swap, hive-mcp-receipts.", "page_url": "/typed-signer/", "use_cases": [ "MCP server", "tool relay", "agent integration", "model context protocol" ], "fit_examples": [ "Postman", "Cisco", "Snowflake", "Fireworks" ], "partner_pages": [ { "key": "postman-proof", "label": "Postman proof surface", "url": "/partners/postman-proof/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" } ], "related": [ "hive-passport", "typed-signer" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "hive mcp relay layer mcp-relay-layer mcp server tool relay agent integration model context protocol postman cisco snowflake fireworks postman proof surface cisco use case a set of mcp relay services that forward tool calls to the real signer and passport hosts. all seven hosted health endpoints answered 200 in this probe, and their local test and smoke suites pass, including live upstream round trips. a 200 on a health route proves the relay process is up and reachable at that host, not that every mcp tool call it forwards succeeds end to end, and not that any upstream primitive it calls is itself authenticated and production accepting. probe the specific tool call you depend on before relying on it. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "media-origin-receipt", "canonical_name": "Media Origin Receipt (M.O.R.)", "canonical_type": "media.origin", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-source-of-truth-reconciliation.md section 4.2: R1 layer live per the receipts.thehiveryiq.com status probe, with issue and verify routes present. No dedicated JSON Schema file is committed in this repository, which is an open authoring gap.", "proves": "Signs media origin and rights evidence across human, AI, hybrid, unknown, insufficient evidence and disputed states, layered around C2PA. It records the origin evidence that was supplied.", "does_not_prove": "It does not decide truth from pixels, does not prove content is human made, and has no canonical schema file in this repository yet. It is a different primitive from origin.proof, which attests human production conditions.", "host": "https://receipts.thehiveryiq.com", "verify_route": "POST https://receipts.thehiveryiq.com/v1/receipt/verify", "mint_route": "POST https://receipts.thehiveryiq.com/v1/receipt/emit", "auth_required": "Emission is gated by the external service and returns a real x402 payment_required challenge. Verification is open.", "schema_url": null, "example_request": { "method": "GET", "url": "https://receipts.thehiveryiq.com/status", "auth": "none", "body": null, "note": "Confirm the R1 layer reports live before relying on the emit and verify routes. No canonical schema file exists in this repository for this type yet." }, "integration_link": "/media-origin-receipt/", "source_path": "External service. Source lives in the private srotzin/hivemorph repository.", "page_url": "/media-origin-receipt/", "use_cases": [ "media provenance", "C2PA", "deepfake dispute", "rights evidence", "content authenticity", "audio origin" ], "fit_examples": [ "Fanatics", "Fish Audio", "Cartesia", "Circle" ], "partner_pages": [ { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" }, { "key": "cartesia-proof", "label": "Cartesia proof surface", "url": "/partners/cartesia-proof/" } ], "related": [ "morso", "originproof", "royalty-provenance" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "media origin receipt (m.o.r.) media.origin media-origin-receipt media provenance c2pa deepfake dispute rights evidence content authenticity audio origin fanatics fish audio cartesia circle fanatics proof surface fish audio proof surface cartesia proof surface signs media origin and rights evidence across human, ai, hybrid, unknown, insufficient evidence and disputed states, layered around c2pa. it records the origin evidence that was supplied. it does not decide truth from pixels, does not prove content is human made, and has no canonical schema file in this repository yet. it is a different primitive from origin.proof, which attests human production conditions. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "morso", "canonical_name": "MoR Segments (Media Origin Receipt segments of origin)", "canonical_type": null, "category": "product_composite_system", "implementation_state": "concept_extension_only", "state_source": "canon-source-of-truth-reconciliation.md section 4.2: a segment level extension of Media Origin Receipt with no distinct code, schema or endpoint found.", "proves": "Nothing on its own. It is a proposed segment level check on top of a valid parent Media Origin Receipt.", "does_not_prove": "No code, schema or endpoint exists. If ever built it would be a child object of media.origin, never a new top level type.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/media-origin-receipt/", "source_path": "No implementation found.", "page_url": "/media-origin-receipt/", "use_cases": [ "excerpt integrity", "splice detection", "segment provenance", "clip verification" ], "fit_examples": [ "Fanatics", "Fish Audio" ], "partner_pages": [ { "key": "fanatics-proof", "label": "Fanatics proof surface", "url": "/partners/fanatics-proof/" }, { "key": "fish-proof", "label": "Fish Audio proof surface", "url": "/partners/fish-proof/" } ], "related": [ "media-origin-receipt" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Concept extension only", "search_text": "mor segments (media origin receipt segments of origin) morso excerpt integrity splice detection segment provenance clip verification fanatics fish audio fanatics proof surface fish audio proof surface nothing on its own. it is a proposed segment level check on top of a valid parent media origin receipt. no code, schema or endpoint exists. if ever built it would be a child object of media.origin, never a new top level type. product_composite_system concept extension only", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "proof-credit", "canonical_name": "Proof Credit", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md section 4.6: positioned as proof state evidence for underwriting, consuming other primitives' receipts, not a new receipt type.", "proves": "Nothing on its own. It converts other primitives' proof state into risk and underwriting signals.", "does_not_prove": "It is not a receipt type, has no endpoint, and no underwriting relationship or insurance outcome is proven anywhere.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/proof-credit/", "source_path": "Pages under proof-credit/ in this repository.", "page_url": "/proof-credit/", "use_cases": [ "underwriting signal", "risk scoring", "insurance evidence", "economic exposure" ], "fit_examples": [ "AIUC", "Chime", "Circle" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "mastercard", "label": "Mastercard use case", "url": "/partners/mastercard/" } ], "related": [ "hive-ledger", "r3pv" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "proof credit proof-credit underwriting signal risk scoring insurance evidence economic exposure aiuc chime circle aiuc proof surface chime proof surface mastercard use case nothing on its own. it converts other primitives' proof state into risk and underwriting signals. it is not a receipt type, has no endpoint, and no underwriting relationship or insurance outcome is proven anywhere. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "protected-flow", "canonical_name": "Protected Flow", "canonical_type": "flow.protection", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-source-of-truth-reconciliation.md section 4.2: R3 delegation envelopes and R4 tool firewall layers confirmed live on receipts.thehiveryiq.com during that session's status probe.", "proves": "Commercial action layer above R3Pv. Packages receipt emission, grouping, signed proof vectors, healing state and evidence export for recoverability aware flows. Layers R3 and R4 are live.", "does_not_prove": "It does not prove any customer deployment, and its backend source is not vendored into this repository. Fleet scale bulk operation is a wrapper concept, not a separately verified endpoint.", "host": "https://receipts.thehiveryiq.com", "verify_route": "GET https://receipts.thehiveryiq.com/status", "mint_route": null, "auth_required": "Status read is open. Flow operations are gated by the external service.", "schema_url": null, "example_request": { "method": "GET", "url": "https://receipts.thehiveryiq.com/status", "auth": "none", "body": null, "note": "Read the layer table and confirm R3 and R4 report live before making any claim." }, "integration_link": "/protected-flow-fleets/", "source_path": "External service. Source lives in the private srotzin/hivemorph repository.", "page_url": "/protected-flow-fleets/", "use_cases": [ "tool firewall", "delegation envelope", "healing state", "evidence export", "high risk workflow", "Circle Gateway", "crosschain USDC", "erc1271", "ERC-1271" ], "fit_examples": [ "Circle", "Cisco", "Chime", "Robot.com" ], "partner_pages": [ { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "protected-flow-fleets-composite", "r3pv" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "protected flow flow.protection protected-flow tool firewall delegation envelope healing state evidence export high risk workflow circle gateway crosschain usdc erc1271 erc-1271 circle cisco chime robot.com chime proof surface circle proof surface cisco use case provable machines stripe proof surface commercial action layer above r3pv. packages receipt emission, grouping, signed proof vectors, healing state and evidence export for recoverability aware flows. layers r3 and r4 are live. it does not prove any customer deployment, and its backend source is not vendored into this repository. fleet scale bulk operation is a wrapper concept, not a separately verified endpoint. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "protected-flow-fleets-composite", "canonical_name": "Protected Flow Fleets", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md sections 4.2 and 4.6: an enterprise container organizing many Protected Flows, with no independent bulk endpoint confirmed. It collapses into Protected Flow.", "proves": "Nothing beyond Protected Flow. It is an organizational wrapper for many flows.", "does_not_prove": "No bulk or fleet endpoint was confirmed, so it is not a separate primitive and must not be counted as one.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable. Inherits Protected Flow's model.", "schema_url": null, "example_request": null, "integration_link": "/protected-flow-fleets/", "source_path": "Pages under protected-flow-fleets/ in this repository.", "page_url": "/protected-flow-fleets/", "use_cases": [ "fleet management", "business unit grouping", "many flows", "enterprise rollout" ], "fit_examples": [ "Cisco", "Circle", "Robot.com" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" } ], "related": [ "protected-flow", "r3pv" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "protected flow fleets protected-flow-fleets-composite fleet management business unit grouping many flows enterprise rollout cisco circle robot.com cisco use case provable machines nothing beyond protected flow. it is an organizational wrapper for many flows. no bulk or fleet endpoint was confirmed, so it is not a separate primitive and must not be counted as one. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "provable-machines", "canonical_name": "Hive Provable Machines", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md section 4.6 recorded this as a composite over R3Pv and Protected Flow with no distinct /v1/machines/* surface. That is still true of the composite itself. Six typed contracts now carry the robotics questions directly and each has its own registry entry, its own published schema and its own open verify route: safety.envelope, agent.coalition, agent.metamorphosis, jurisdictional.clearance, cloazk.warden and sls.metering, all recorded deployed in hive-verifier-api/PRODUCTION_MANIFEST.json.", "proves": "Nothing on its own. It is the page that gathers the robotics and machine autonomy primitives in one place. The proving is done by the six typed contracts listed under related and by the primitives they compose with.", "does_not_prove": "The composite has no endpoint, schema or receipt type of its own, so nothing here should be called a machines API. It proves no robot deployment, no customer and no fleet. A verdict from any of the six typed contracts is a ceiling on what was recorded. None of them establishes that anyone suffered a loss and none of them decides coverage.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable. Use the underlying primitives' auth model.", "schema_url": null, "example_request": null, "integration_link": "/machines/", "source_path": "Pages under machines/ and robotics/ in this repository.", "page_url": "/machines/", "use_cases": [ "robot", "robotics", "autonomous machine", "teleoperation", "robot as a service", "fleet autonomy", "industrial automation", "humanoid safety envelope", "robot as a service metering evidence", "cross border fleet rule set", "multi robot decision attribution", "fleet software change record" ], "fit_examples": [ "Kodiak Robotics", "Robot.com", "Cisco" ], "partner_pages": [ { "key": "kodiak-robotics-proof", "label": "Kodiak Robotics proof surface", "url": "/partners/kodiak-robotics-proof/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "robotics", "label": "Robotics", "url": "/robotics/" } ], "related": [ "agent-coalition", "agent-metamorphosis", "cloazk-warden", "effect-closure", "jurisdictional-clearance", "ppr", "protected-flow", "r3pv", "s2s", "safety-envelope", "sls-metering" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "hive provable machines provable-machines robot robotics autonomous machine teleoperation robot as a service fleet autonomy industrial automation humanoid safety envelope robot as a service metering evidence cross border fleet rule set multi robot decision attribution fleet software change record kodiak robotics robot.com cisco kodiak robotics proof surface robot.com proof surface provable machines robotics nothing on its own. it is the page that gathers the robotics and machine autonomy primitives in one place. the proving is done by the six typed contracts listed under related and by the primitives they compose with. the composite has no endpoint, schema or receipt type of its own, so nothing here should be called a machines api. it proves no robot deployment, no customer and no fleet. a verdict from any of the six typed contracts is a ceiling on what was recorded. none of them establishes that anyone suffered a loss and none of them decides coverage. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "r3pv", "canonical_name": "Receipt Reduction and Recovery Proof Vector (R3Pv)", "canonical_type": "receipt.reduction", "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md section 5: GET https://receipts.thehiveryiq.com/status returned 200 with a commit SHA matching the cloned hivemorph HEAD; canon-source-of-truth-reconciliation.md section 4.2 confirms layers R1 to R9 live and R10 to R12 roadmap.", "proves": "Reduces a group of signed receipts into a signed machine readable decision vector: proof state, recoverability, policy position, economic exposure and permitted next actions. Layers R1 to R9 are live.", "does_not_prove": "It does not prove the underlying business decision was correct, and layers R10 to R12 are roadmap and must never be presented as live. The backend source is not vendored into this repository, so this page cannot show a repository level implementation state for it.", "host": "https://receipts.thehiveryiq.com", "verify_route": "GET https://receipts.thehiveryiq.com/status", "mint_route": null, "auth_required": "Status read is open. Receipt emission through this host is gated by its own service policy, not by this repository.", "schema_url": null, "example_request": { "method": "GET", "url": "https://receipts.thehiveryiq.com/status", "auth": "none", "body": null, "note": "Non mutating status read. Layer states R1 to R9 live and R10 to R12 roadmap are reported by the service itself." }, "integration_link": "/r3pv-benchmark/", "source_path": "External service. Source lives in the private srotzin/hivemorph repository, not in this repository.", "page_url": "/r3pv-benchmark/", "use_cases": [ "receipt reduction", "recoverability", "risk vector", "portfolio of receipts", "incident recovery", "robot fleet recovery", "Circle Gateway", "crosschain USDC", "erc1271", "ERC-1271" ], "fit_examples": [ "Circle", "Kalshi", "Cisco", "Robot.com", "AIUC", "Chime" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "kalshi-proof", "label": "Kalshi proof surface", "url": "/partners/kalshi-proof/" }, { "key": "machines", "label": "Provable machines", "url": "/machines/" }, { "key": "robot-com-proof", "label": "Robot.com proof surface", "url": "/partners/robot-com-proof/" }, { "key": "stripe", "label": "Stripe proof surface", "url": "/partners/stripe/" } ], "related": [ "effect-closure", "protected-flow" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "receipt reduction and recovery proof vector (r3pv) receipt.reduction r3pv receipt reduction recoverability risk vector portfolio of receipts incident recovery robot fleet recovery circle gateway crosschain usdc erc1271 erc-1271 circle kalshi cisco robot.com aiuc chime aiuc proof surface circle proof surface kalshi proof surface provable machines robot.com proof surface stripe proof surface reduces a group of signed receipts into a signed machine readable decision vector: proof state, recoverability, policy position, economic exposure and permitted next actions. layers r1 to r9 are live. it does not prove the underlying business decision was correct, and layers r10 to r12 are roadmap and must never be presented as live. the backend source is not vendored into this repository, so this page cannot show a repository level implementation state for it. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "shod", "canonical_name": "SHOD (six hop outbound discrimination)", "canonical_type": "discrimination.sixhop", "category": "external_operational_service", "implementation_state": "external_service_claimed_not_reprobed", "state_source": "canon-source-of-truth-reconciliation.md section 4.5 carries the same not re probed caveat as SMSH. No probe of this host appears in canon-repository-live-service-audit.md section 5.", "proves": "Fixed six hop outbound chain of custody discrimination receipt: six independent checks screen an outbound action before it leaves the boundary.", "does_not_prove": "Its live status was not re probed in either current audit pass and no source repository was identified for the runtime service.", "host": "https://hivetrust.hiveagentiq.com", "verify_route": null, "mint_route": null, "auth_required": "Unknown until re probed. Do not quote an auth model for this service.", "schema_url": null, "example_request": { "method": "GET", "url": "/canon/shod/", "auth": "none", "body": null, "note": "Read the site page. Re probe the host before treating SHOD as an operational dependency." }, "integration_link": "/canon/shod/", "source_path": "External service. No source repository identified in the repository audit.", "page_url": "/canon/shod/", "use_cases": [ "outbound screening", "payment pre check", "chain of custody", "six hop check", "sanctions screening" ], "fit_examples": [ "Circle", "Chime", "Robinhood", "Cisco" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "chime-proof", "label": "Chime proof surface", "url": "/partners/chime-proof/" }, { "key": "robinhood-proof", "label": "Robinhood proof surface", "url": "/partners/robinhood-proof/" } ], "related": [ "hahs", "perimeter-bond", "smsh" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, claimed, not re probed", "search_text": "shod (six hop outbound discrimination) discrimination.sixhop shod outbound screening payment pre check chain of custody six hop check sanctions screening circle chime robinhood cisco circle proof surface chime proof surface robinhood proof surface fixed six hop outbound chain of custody discrimination receipt: six independent checks screen an outbound action before it leaves the boundary. its live status was not re probed in either current audit pass and no source repository was identified for the runtime service. external_operational_service external service, claimed, not re probed", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "smartagent-route-graph", "canonical_name": "SmartAgent route graph", "canonical_type": null, "category": "product_composite_system", "implementation_state": "visualization_only", "state_source": "canon-source-of-truth-reconciliation.md section 4.4 records it self describing as a visualization product, not a receipt issuing primitive. canon-repository-live-service-audit.md section 1 found no repository under SmartAgent or SmartMorphAgent and no live route.", "proves": "Nothing. It draws an agent moving across model, provider, tool, verification and payment stops.", "does_not_prove": "It issues no receipts, has no repository and has no route. Exclude it from every primitive count.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/agents/", "source_path": "No repository found under SmartAgent or SmartMorphAgent.", "page_url": "/agents/", "use_cases": [ "visualization", "agent route map", "explainer" ], "fit_examples": [], "partner_pages": [], "related": [ "afir-s3", "routing-receipt" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Visualization only", "search_text": "smartagent route graph smartagent-route-graph visualization agent route map explainer nothing. it draws an agent moving across model, provider, tool, verification and payment stops. it issues no receipts, has no repository and has no route. exclude it from every primitive count. product_composite_system visualization only", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "smsh", "canonical_name": "SMSH (sealed message state hash)", "canonical_type": "message.sealedstate", "category": "external_operational_service", "implementation_state": "external_service_claimed_not_reprobed", "state_source": "canon-source-of-truth-reconciliation.md section 4.5 marks SMSH live claimed but explicitly not re probed, with independently_reprobed_this_session false. canon-repository-live-service-audit.md section 3.9 confirms the smsh-stamp-verifier library repository passed 69/69 vitest tests with 92.4 percent statement coverage and has no standalone host.", "proves": "Seals a message state hash for later independent verification. The verifier library is real, public and tested.", "does_not_prove": "There is no standalone hosted service for it; the library is consumed as a dependency. Its hosted claim was not re probed in either current audit pass.", "host": "https://hivetrust.hiveagentiq.com", "verify_route": null, "mint_route": null, "auth_required": "Library use requires no auth. No hosted route was verified in the current passes.", "schema_url": null, "example_request": { "method": "GET", "url": "/smsh/", "auth": "none", "body": null, "note": "Library first primitive. Read the site page, then use the public smsh-stamp-verifier library rather than assuming a hosted route." }, "integration_link": "/canon/smsh/", "source_path": "Public repositories srotzin/smsh-stamp-verifier and srotzin/prov-absence.", "page_url": "/canon/smsh/", "use_cases": [ "message sealing", "non membership proof", "sorted Merkle", "state hash", "absence proof" ], "fit_examples": [ "Cisco", "Circle", "Snowflake" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" } ], "related": [ "hahs", "shod" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, claimed, not re probed", "search_text": "smsh (sealed message state hash) message.sealedstate smsh message sealing non membership proof sorted merkle state hash absence proof cisco circle snowflake cisco use case circle proof surface seals a message state hash for later independent verification. the verifier library is real, public and tested. there is no standalone hosted service for it; the library is consumed as a dependency. its hosted claim was not re probed in either current audit pass. external_operational_service external service, claimed, not re probed", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "spectralzk", "canonical_name": "SpectralZK v1", "canonical_type": "zk.spectral", "category": "external_operational_service", "implementation_state": "offline_reference_implementation", "state_source": "canon-source-of-truth-reconciliation.md section 4.5: canon/spectralzk/spectralzk_v1.py is a 404 line runnable offline reference implementation with a committed schema at .well-known/schemas/spectralzk-v1.json.", "proves": "Offline reference implementation of a Schnorr and Merkle zero knowledge proof scheme. Anyone can verify a sample proof locally with no network and no key material.", "does_not_prove": "There is no hosted verify route for it. It is a reference implementation, not a production service, and no benchmark of a hosted deployment exists.", "host": null, "verify_route": "python3 canon/spectralzk/spectralzk_v1.py verify sample-proof.json", "mint_route": "python3 canon/spectralzk/spectralzk_v1.py prove", "auth_required": "None. It runs locally and offline.", "schema_url": "https://thehiveryiq.com/.well-known/schemas/spectralzk-v1.json", "example_request": { "method": "CLI", "url": "python3 canon/spectralzk/spectralzk_v1.py verify canon/spectralzk/sample-proof.json", "auth": "none", "body": null, "note": "Offline verification. No hosted route exists and none should be implied." }, "integration_link": "/canon/spectralzk/", "source_path": "canon/spectralzk/spectralzk_v1.py in this repository.", "page_url": "/canon/spectralzk/", "use_cases": [ "zero knowledge proof", "offline verification", "Schnorr", "Merkle", "privacy preserving check" ], "fit_examples": [ "Circle", "Cisco", "ICE", "Snowflake" ], "partner_pages": [ { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "disclosure-free-replay", "viewkey" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Offline reference implementation", "search_text": "spectralzk v1 zk.spectral spectralzk zero knowledge proof offline verification schnorr merkle privacy preserving check circle cisco ice snowflake circle proof surface cisco use case ice proof surface offline reference implementation of a schnorr and merkle zero knowledge proof scheme. anyone can verify a sample proof locally with no network and no key material. there is no hosted verify route for it. it is a reference implementation, not a production service, and no benchmark of a hosted deployment exists. external_operational_service offline reference implementation", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "standard-units-glossary", "canonical_name": "SDU, SGU, SPU and SVU standard units", "canonical_type": null, "category": "product_composite_system", "implementation_state": "glossary_only", "state_source": "canon-source-of-truth-reconciliation.md section 4.5: direct reads confirm these four pages are unit of measure glossary content, for example standard data units, not receipt issuing primitives.", "proves": "Nothing. They define units of measure used when describing receipt volumes and workloads.", "does_not_prove": "They are definitional pages only and must be excluded permanently from any primitive count, even though they live under /canon/.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable.", "schema_url": null, "example_request": null, "integration_link": "/canon/sdu/", "source_path": "Pages under canon/sdu/, canon/sgu/, canon/spu/ and canon/svu/ in this repository.", "page_url": "/canon/sdu/", "use_cases": [ "units of measure", "glossary", "pricing units", "capacity planning" ], "fit_examples": [], "partner_pages": [], "related": [], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Glossary only", "search_text": "sdu, sgu, spu and svu standard units standard-units-glossary units of measure glossary pricing units capacity planning nothing. they define units of measure used when describing receipt volumes and workloads. they are definitional pages only and must be excluded permanently from any primitive count, even though they live under /canon/. product_composite_system glossary only", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "typed-signer", "canonical_name": "Hive Typed Signer (SiGR and USAP crypto core)", "canonical_type": null, "category": "external_operational_service", "implementation_state": "external_service_live_probed", "state_source": "canon-repository-live-service-audit.md sections 3.1 and 5: GET https://signer.thehiveryiq.com/ and /pubkey returned 200 with an ML-DSA-65 key matching hive-typed-signer.onrender.com byte for byte; the public source repository srotzin/hive-typed-signer exists and its own test run was 9 files, 0 failed.", "proves": "The shared ML-DSA-65 signing and verification core. It is a signing engine, not a receipt type.", "does_not_prove": "It is not itself a receipt contract and must never be counted as one. POST /v1/imprimatur/gate returned 404 on this host, so an Imprimatur clearance backend is not live here. Which host is canonical for which capability, this one or the typed receipt service at thehiveryiq.com/v1, is still not documented on the site.", "host": "https://signer.thehiveryiq.com", "verify_route": "GET https://signer.thehiveryiq.com/pubkey", "mint_route": null, "auth_required": "Public key and health reads are open. Signing operations are gated by the service.", "schema_url": null, "example_request": { "method": "GET", "url": "https://signer.thehiveryiq.com/pubkey", "auth": "none", "body": null, "note": "The returned ML-DSA-65 key should match hive-typed-signer.onrender.com exactly. A mismatch means one of the two hosts drifted." }, "integration_link": "/typed-signer/", "source_path": "Public repository srotzin/hive-typed-signer. Not vendored into this repository.", "page_url": "/typed-signer/", "use_cases": [ "ML-DSA-65 signing", "post quantum signature", "key rotation", "signer core", "QPuF info" ], "fit_examples": [ "Cerebras", "Fireworks", "Cisco", "Circle" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" }, { "key": "cerebras-proof", "label": "Cerebras proof surface", "url": "/partners/cerebras-proof/" } ], "related": [ "hiveseal-qpuf", "sigr-chain" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, historical response recorded", "search_text": "hive typed signer (sigr and usap crypto core) typed-signer ml-dsa-65 signing post quantum signature key rotation signer core qpuf info cerebras fireworks cisco circle aiuc proof surface cerebras proof surface the shared ml-dsa-65 signing and verification core. it is a signing engine, not a receipt type. it is not itself a receipt contract and must never be counted as one. post /v1/imprimatur/gate returned 404 on this host, so an imprimatur clearance backend is not live here. which host is canonical for which capability, this one or the typed receipt service at thehiveryiq.com/v1, is still not documented on the site. external_operational_service external service, live probe on record", "recorded_operational": true, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "viewkey", "canonical_name": "ViewKey selective disclosure", "canonical_type": "viewkey.disclosure", "category": "external_operational_service", "implementation_state": "external_service_claimed_not_reprobed", "state_source": "canon-source-of-truth-reconciliation.md section 4.5 records a live priced API at hivetrust.hiveagentiq.com with per call USDC pricing, based on a prior audit. That host was not independently re probed in the reconciliation session or in canon-repository-live-service-audit.md section 5.", "proves": "Selective disclosure and compliance certificate layer over receipts, with priced verification routes, so a holder, a regulator and a counterparty each read their own slice of one signed record.", "does_not_prove": "Its live status rests on a prior audit only. No probe of hivetrust.hiveagentiq.com appears in the two current audit passes, so it must not be presented as freshly verified.", "host": "https://hivetrust.hiveagentiq.com", "verify_route": "POST https://hivetrust.hiveagentiq.com/v1/viewkey/verify-compliance", "mint_route": "POST https://hivetrust.hiveagentiq.com/v1/viewkey/issue-certificate", "auth_required": "Priced per call in USDC per the prior audit. Re probe before quoting a price or a route.", "schema_url": null, "example_request": { "method": "GET", "url": "https://hivetrust.hiveagentiq.com/", "auth": "none", "body": null, "note": "Re probe this host before making any live claim. The two current audit passes did not reach it." }, "integration_link": "/canon/viewkey/", "source_path": "External service. No source repository was identified in the repository audit.", "page_url": "/canon/viewkey/", "use_cases": [ "selective disclosure", "compliance certificate", "regulator view", "bill of materials", "audit trail" ], "fit_examples": [ "Cisco", "Snowflake", "Circle", "ICE", "Chime" ], "partner_pages": [ { "key": "cisco", "label": "Cisco use case", "url": "/cisco/" }, { "key": "snowflake-proof", "label": "Snowflake proof surface", "url": "/partners/snowflake-proof/" }, { "key": "circle", "label": "Circle proof surface", "url": "/partners/circle/" }, { "key": "ice-proof", "label": "ICE proof surface", "url": "/partners/ice-proof/" } ], "related": [ "disclosure-free-replay", "egress-bond", "hahs" ], "aliases": [], "family": "external_operational_service", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "External service, claimed, not re probed", "search_text": "viewkey selective disclosure viewkey.disclosure viewkey selective disclosure compliance certificate regulator view bill of materials audit trail cisco snowflake circle ice chime cisco use case snowflake proof surface circle proof surface ice proof surface selective disclosure and compliance certificate layer over receipts, with priced verification routes, so a holder, a regulator and a counterparty each read their own slice of one signed record. its live status rests on a prior audit only. no probe of hivetrust.hiveagentiq.com appears in the two current audit passes, so it must not be presented as freshly verified. external_operational_service external service, claimed, not re probed", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } }, { "anchor": "xcalibur", "canonical_name": "SiGR suite", "canonical_type": null, "category": "product_composite_system", "implementation_state": "composite_no_independent_endpoint", "state_source": "canon-source-of-truth-reconciliation.md section 4.6: seven sub brands have pages on disk, MEMBRANE, PROOF and QUORUM self gate as private until they ship, and no independent backend endpoint was confirmed for ATTEST, DELTA, ECHO or VERIFY. canon-repository-live-service-audit.md section 1 found only a pre registration methodology repository, xcalibur-evaluation, not an implementation.", "proves": "Nothing on its own. It is an umbrella suite name over seven sub brands.", "does_not_prove": "It is not a receipt type, has no independent endpoint, and must never be counted in a primitive total. Each sub leg would need its own mint and verify pair to count.", "host": null, "verify_route": null, "mint_route": null, "auth_required": "Not applicable. There is no endpoint.", "schema_url": null, "example_request": null, "integration_link": "/xcalibur/", "source_path": "Pages under xcalibur/ in this repository. Methodology repository srotzin/xcalibur-evaluation.", "page_url": "/xcalibur/", "use_cases": [ "evaluation suite", "product suite", "umbrella brand" ], "fit_examples": [ "AIUC", "Snowflake", "Cerebras" ], "partner_pages": [ { "key": "aiuc-proof", "label": "AIUC proof surface", "url": "/partners/aiuc-proof/" } ], "related": [ "evar" ], "aliases": [], "family": "product_composite_system", "benchmark": null, "benchmark_withheld_reason": "No benchmark is shown because none was measured against a verified deployment of this entry in a recorded session.", "tests": [], "reconciliation_note": null, "operational": false, "state_label": "Composite, no endpoint of its own", "search_text": "sigr suite xcalibur evaluation suite product suite umbrella brand aiuc snowflake cerebras aiuc proof surface nothing on its own. it is an umbrella suite name over seven sub brands. it is not a receipt type, has no independent endpoint, and must never be counted in a primitive total. each sub leg would need its own mint and verify pair to count. product_composite_system composite, no endpoint of its own", "recorded_operational": false, "current_acceptance": { "status": "not_tested", "evidence": null, "observed_at": null, "source_revision": null, "deployed_revision": null, "limitation": "Recorded deployment metadata is not current endpoint acceptance." } } ], "acceptance_review_date": "2026-09-05", "operational_semantics": "True requires pinned current endpoint acceptance. False means not accepted here, not necessarily unavailable. recorded_operational preserves historical reports.", "service_surface_map": { "map_id": "hive.canon.service-surfaces", "revision": "2026-09-12.1", "kind": "service_composition_map", "path": "/canon/surfaces/surface-map.json", "page": "/canon/surfaces/index.html", "coverage_index": "/canon/surfaces/registry-coverage.json", "service_count": 5, "counts_as_receipt_contract": false, "changes_buyer_scope": false, "promotes_current_acceptance": false } }