White papers

Twenty six white papers on typed receipt instruments

These are the working papers for the Hive receipt canon. The first twenty one cover deployed receipt instruments. Five new papers explain the specialized receipt engines, their verifier gates, their adverse outcomes, and the point where each claim stops.

Every paper follows the same shape: what the instrument binds, what is deliberately left out of the signed body, the gates in the order they run, the boundary text that sits inside the signed bytes, the adversarial cases, the measured cost, how to run it, and where it sits in the canon. Each one ends with a link to its canon entry, its JSON Schema and its verify route, so you can check the paper against the artifact.

Verification is open on the deployed types and needs no credentials. Patent pending.

An honest note on stateThe original twenty one papers describe deployed receipt instruments. The five specialized primitive papers describe the current reference implementation and do not claim public deployment.

Specialized primitives

family: specialized primitives, 5 papers

A Refused Write Is Evidencetamper.attempt, transparency.checkpoint, sequence.attestationA receipt can record that a requested mutation was refused without guessing who asked, why they asked, or whether earlier evidence was complete.reference_implementation From Sandbox Claims to Checkable Boundary Relationsusap.pbs, usap.perimeter, usap.egress, usap.refusal, usap.howler, usap.diurnal, usap.forensicSandbox evidence becomes useful when each receipt compares a supplied observation to a precommitted rule and names the relation that passed or failed.reference_implementation Evidence Graphs for Agent Runsafir.ocr.docproof, afir.s3, afir.stream, origin.proofA canonical evidence graph lets a verifier recompute order and state continuity without claiming that every source payload was true.reference_implementation Device to Receipt Trust Boundarieshiveseal.qpuf, ppr.wearable, s2s.signatureA device signature can bind a message, nonce, time, and sequence. Hardware identity needs a verified trust path and must remain indeterminate when that path is missing.reference_implementation Checkable Setsreceipt.registry.sovereign, settlement.feed, voting.verifiableCanonical set checkpoints let a verifier rebuild roots, counts, continuity, arithmetic, and inclusion without granting legal or financial authority.reference_implementation

Authority

family: authority, 3 papers

Cumulative Mandate Receiptmandate.aggregateProve a delegated spender stayed inside its window limit without publishing a single transaction.production_deployed Mandate Conformance Receiptmandate.conformanceSettle whether one agent payment fit the authority it was given, at the moment it was given.production_deployed Intent Affirmation Receiptintent.affirmationShow that the summary a person confirmed is the summary that was sent on.production_deployed

Bonded performance

family: bpa, 2 papers

Parametric Trigger Receiptparametric.triggerShow a payout condition actually fired against data committed before the event.production_deployed Recovery Determination Receiptrecovery.determinationTurn a fault finding into a settlement position from a table nobody could write after the loss.production_deployed

Compliance evidence

family: compliance-evidence, 1 paper

Screening Attestation Receiptscreening.attestationBind a sanctions screening to the exact list bytes checked, so the version cannot be restated later.production_deployed

Evaluation

family: evaluation, 1 paper

Evaluation Administration Receipteval.administrationProve who ran a model evaluation and that the test set was fixed before the run.production_deployed

Incident evidence

family: incident-evidence, 1 paper

Knowledge Timestamp Receiptknowledge.timestampFix the latest moment your organisation could have first known, against an external clock.production_deployed

Network authority

family: network-authority, 7 papers

Admission Binding Receiptadmission.bindingShow the party you admitted and the party that acted are the same party.production_deployed Granter Qualification Receiptauthority.qualificationProve the party that granted authority had the authority to give it away.production_deployed Authority Revocation Receiptauthority.revocationPlace an action before, inside, or after a revocation window rather than arguing about it.production_deployed Delegation Attenuation Receiptdelegation.attenuationProve every link in a delegation chain narrowed the grant instead of widening it.production_deployed Effect Quiescence Receipteffect.quiescenceEvidence that nothing happened, on channels named before the interval opened.production_deployed Cross Acceptor Receiptmandate.crossacceptorShow how widely one authority was used across acceptors without naming any acceptor.production_deployed Directory State Receiptdirectory.stateProve what a key directory held at one instant, after it has rotated and kept no history.production_deployed

Provenance

family: provenance, 1 paper

Causal Path Receiptcausal.pathEstablish that a chain of steps runs unbroken from an origin to an outcome.production_deployed

Risk evidence

family: risk-evidence, 3 papers

Portfolio Exposure Receiptportfolio.exposureReport how concentrated a book is without disclosing who is in it.production_deployed Intent Verifiability Receiptintent.verifiabilitySettle whether an instruction could ever be checked, using a rule fixed before it was written.production_deployed Conduct Record Receiptconduct.recordCount an operator's outcomes over a window without naming the operator or anyone it dealt with.production_deployed

Settlement evidence

family: settlement-evidence, 2 papers

Ledger Parity Receiptledger.parityLet two parties settle whether their books agree without either side opening its books.production_deployed Mandate Cross Reference Receiptmandate.crossreferenceRun the cross reference check two payment specifications require and give to nobody.production_deployed

Each instrument also has a canon entry with its schema, its verify route and its implementation state. Start at the Hive canon for the full registry, or go to verify a receipt to check one you already hold.