The non-mutating substrate
under the Carnac™ family.
Prompt. Proof. Provenance. InkFrame v1 is the layer that holds a proof-completion frame still while proof is attached to it, so nothing about a decision can be quietly changed after the fact. It is the physical evidence floor under everything Carnac™ does.
Carnac™ sizes how much proof a decision deserves. It does not judge. Carnac Live Ink™ is the live proof, context, and permission marking surface. InkFrame v1 is what makes any of it evidence rather than assertion.
InkFrame v1 · eight roots, sealed by their own hashes.
Every layer of the receipt is committed by its own address. The input is committed by hash. Anchors reference byte ranges by fingerprint. The cue graph, the proof demands, the evidence bindings, the action envelope, and the lineage all live in separate roots. A hybrid Ed25519 + ML-DSA-65 signature seals the whole thing. Change one byte anywhere and the frame_id changes, which breaks the signature.
Soak posture. We run long-duration signed soaks as a matter of routine, not as a milestone we are waiting on. Every pass is itself signed, so the discipline is checkable rather than asserted.
Proof Pre-Fill
The instant a decision forms, the receipt is prepared and bound by fingerprint only, before the action fires. When a proof or permission cue triggers, the exact signed evidence or authority is resolved locally against an index by span fingerprint, never by raw text, and bound into the receipt before submit.
The result is a ready receipt at the moment of decision. No lag, no after-the-fact reconstruction, no "we'll write it up later" gap that lets machine decisions escape provenance. The proof exists as the decision does.
InkFrame Non-Mutation
A content-addressed envelope that commits every layer by its own SHA-256 hash over RFC 8785 canonical JSON. Change one byte in any layer and the address of that layer changes, which changes the frame_id, which breaks the signature. Non-mutation is provable, not promised.
Anyone with the verifier code can recompute the addresses and reverify the signature. Tamper detection is a property of the math, not a promise from the vendor. That is what makes a Carnac Live Ink™ receipt evidence rather than assertion.
Disclosure-Free Replay
Reconstruct the exact route and cue-delta of what happened without ever showing the prompt, the data, or the words. Built from a signed cue-delta manifest that references anchor_ids and span fingerprints, not text. An auditor drops a receipt, scrubs a timeline of cue deltas, and sees which spans triggered which demands at submit-time. The raw words never appear.
Leak detection is built in. Any delta that carries a text field fails verification. The proof of the route holds without moving or exposing the data.
Arrival Countersignature
The gateway counter-signs on arrival by comparing the approved action tuple against the delivered action tuple. Same target, same amount, same params, the gateway signs. Any drift, and the delta is itself recorded and signed as a refusal.
The result is proof of the journey, end to end. A wire cleared for Acme LLC cannot silently arrive at Evil Corp. A payout cleared for one recipient cannot become a payout to another. What ran matches what was cleared, and that match is itself a signed artifact.
Minimal Cue Graph
Typed relationships between spans, shaped as {src, tgt, rel}. Relations: supports, contradicts, supersedes, enables. No scoring, no severity math. This is the graph the Replay layer walks and the graph that makes Proof Pre-Fill and Disclosure-Free Replay coherent.
Prove it yourself. Offline. No account.
Everything below is provable by you, not asserted by us. The Hive Verifier Kit is a small offline package that ships only the public-safe verification code. The span-detection, proof-sizing, and routing math stays private, so there is nothing sensitive to pass around.
Four checks the kit runs
Public-safe by construction. No private engine internals ship with the kit. What ships is enough to reverify every claim on this page.
Where InkFrame v1 sits in the Carnac™ family
Carnac™ sizes how much proof a decision deserves. It does not judge. CarnacPrompt™ is the prompt-formation surface. Carnac Gateway™ is the arrival and countersignature surface. Carnac Live Ink™ is the live proof, context, and permission marking surface. InkFrame v1 is the non-mutating floor under all of it · the layer that makes any of it evidence rather than assertion.
The engine that decides how much proof is right for a given decision is private. The floor that makes any of it verifiable is public. That split is intentional.