proposed architecture prepared privately for Chime · not indexed · not a statement that Chime is a customer, partner, pilot, or endorser

Chime built the control plane.
Hive adds the proof.

ChimeCore, Jade, Archimedes, and human-overseen AI already decide and act on members' money. This page proposes one addition: an independent, signed receipt for each action, so what the control plane did is provable to a member, a bank partner, or an examiner. Every demo on this page runs here, in your browser. Member data stays. Only the proof crosses.

Member data never movesA one-way fingerprint, a policy ID, a timestamp, and a signature cross the boundary. Never the transaction, the dispute file, or the member.
Independent, not self-writtenA bank cannot be the sole witness to its own AI. Hive is an outside attestor, which is exactly what makes the receipt believable to a regulator.
Nothing waitsThe receipt is pre-filled beside the action, not written up after. It adds no delay to a member's support chat, dispute, or transfer.

The proof is in the provenance. It does not judge.

where a signed receipt fits inside Chime today

Six Chime surfaces. One receipt rail.

Each surface below is something Chime has publicly described running. The receipt does not change how the surface works. It attaches independent proof that the action happened the way the control plane said, without moving the member data underneath.

Jade · member copilot

Proactive actions, receipted

As Jade moves from reactive tools to proactive financial management, each member-facing action carries a signed receipt binding the consent, transparency, and human-safeguard trace Chime already promises.

Proof binds conditions and actions, never that a recommendation was right.
Disputes · Reg E

Evidence packet, pre-assembled

Chime's AI-powered disputes platform cut average resolution time from ~42 minutes to under 20. Every dispute resolves into a signed, examiner-ready packet a network or examiner can re-verify offline.

Resolution time down more than 50% · chain of custody is the artifact.
Fraud · trust and safety

Risk decisions, provable

AI fraud detection and risk-scoring helped cut fraud losses 29% since 2022, with final enforcement under established rules and human oversight. Each intervention gets a signed receipt of what was checked and why.

Fraud losses down 29% · human oversight stays; proof makes it demonstrable.
ChimeCore · bank partners

Money-movement receipts

ChimeCore can move money, extend credit, and stop unwanted charges with member permission. A receipt proves the ledger action ran under the stated policy, exportable to a bank partner.

Signed proof of the action · zero member bytes leave the boundary.
Archimedes · engineering agents

Agent build actions, attested

Archimedes ships product with AI agents doing the majority of development: 84% of March code was AI-developed, up from 29% four months earlier. Agent actions can carry receipts of what ran, under which control.

84% of March code AI-developed · quality, control, and compliance preserved.
Galileo · data pipelines

Pipeline integrity, receipted

Transaction records flow from Galileo over SFTP through a modern data-warehouse stack, with data-quality checks that fail the job on error. A receipt proves each check ran on which inputs.

Proof that a control executed · the RDF payloads never cross to Hive.

Prepared for Chime as a proposed architecture. Figures are public and source-linked in the evidence section below, and should be re-verified before external use.

the animated picture · illustration of how the service works, not Chime data

The member data stays. The signed proof crosses.

Left of the line is everything inside the Chime and bank-partner boundary. Right of the line is a bank partner, an examiner, or the member. Watch what actually crosses.

Inside the Chime and bank-partner boundaryMember profiles, transactions, dispute files, fraud signals, and Galileo RDF payloads stay here. They bounce off the line. They never cross.
Only the signed proof crossesA SHA-256 fingerprint, a policy ID, a timestamp, and a hybrid signature travel to the bank partner, examiner, or member. Enough to verify the action. Nothing that reveals the member.

Every square that crosses is a receipt, not a record. The count of member bytes that crossed is always zero. That is the whole design.

your surfaces · your numbers · arithmetic tool, not a forecast or quote

Move the sliders. Watch the moved member data stay zero.

Sliders are yours to set. This is arithmetic on numbers you enter, not a forecast, a quote, or a claim about Chime's real volumes.

AI-assisted member-action receipts / mo·
Dispute evidence receipts / mo·
Fraud review receipts / mo·
Total signed evidence events / mo·
Proof bytes on the wire / mo
~96 bytes per receipt, batched
·
Member data moved to Hive0 bytes

Whatever you put in those sliders, the last number is always zero. Proof bytes scale with actions; member data moved does not scale at all.

offline verifier · runs entirely in this tab · no telemetry after page load

Verify a Chime-shaped receipt. Right here. No install.

This widget builds a real signed receipt for a Chime dispute action, verifies it in your browser, lets you tamper with a byte and watch the check fail, re-verifies from pasted JSON, and re-checks a published 5,000-frame routine soak. The signing engine is bundled and served from this same domain. Open your network tab: after load, it makes zero outbound calls except the two same-origin JSON fetches it names.

In-browser · offline The offline verifier never leaves this page except to fetch its own sample and bench file from this domain.

Widget idle. Click 1 · Build & verify a Chime receipt to load the engine and run the first check. Everything runs in this tab.

Every click prints the recomputed hash next to the stored hash, one line per layer. A changed byte reads FAIL in the same output; a clean receipt reads PASS. Success is labelled, never color alone. There is no server round-trip. The same engine ships as an offline command-line kit that is byte-identical to what runs here.

live workflow · this button makes real calls to the hive api · not the offline widget above

Run the Chime proof workflow. End to end, live.

This is different from the offline verifier by design. It drives the real Hive receipt primitives in a Chime-shaped sequence: relay a signed dispute event, group it into a proof vector (R3Pv), run a Protected Flow assessment under a bank policy pack, and export a signed evidence bundle. No account, no key, no payment beyond the calls you trigger. No funds move and Hive never calls a Chime or Galileo API.

1signed relay event
R3Pvgrouped proof vector
assessprotected flow decision
exportsigned evidence bundle

Network state: unknown This leaves your browser and hits receipts.thehiveryiq.com. If the call is blocked by CORS or offline, the widget runs a truthful local cryptographic fallback and labels it clearly. It does not fake a live success.

Open the R3Pv health route
Idle. Click Run the live proof workflow to relay a Chime dispute event, group it into an R3Pv vector, assess it under the strict_bank policy pack, and export a signed evidence bundle. Each step prints as it returns.

The Chime-shaped payload carries a dispute event kind and reason only, never a real member. Curl the same sequence yourself:

# 1 · relay a signed Chime dispute event (no member data, no funds move) curl -sS -X POST https://receipts.thehiveryiq.com/v1/receipt-relay/event \ -H 'Content-Type: application/json' \ -d '{"action":"account_action","external_system":"chime", "actor":{"did":"did:example:support-agent"}, "payload":{"kind":"dispute_open","reason":"unauthorized_charge"}, "healing_state":"pre_broadcast_stoppable"}' # 2 · group the receipt, derive the R3Pv proof vector # 3 · POST /v1/protected-flow/assess under policy_pack=strict_bank # 4 · GET /v1/protected-flow/evidence/{group_id}/export
what makes the receipt · four parts · patent pending

Four small inventions. One receipt.

Plain English. Each part closes a gap a self-written log leaves open. These are the four Filings under InkFrame v1, the same four the verifier above exercises.

Filing A
Proof pre-fillThe receipt is attached before the action runs, not written up after. Nothing waits on Hive to render it.
Filing B
Sealed by contentA tamper-evident record. Change one byte in a dispute amount and the check fails, as the verifier shows.
Filing C
Disclosure-free replayProve the action's route without moving the member data, the transaction, or the words behind it.
Filing D
Arrival countersignA gateway countersignature, so what ran is what was cleared, on the journey the receipt took.
reference build passed its integrity gate · long-duration signed soaks run as routine · patent pending
start with the rail that runs today · grow into the broader canon

Running now. Expansion offerings.

Organized around the Chime surfaces this page names. Everything under Running now is live today (the verifier and live workflow above exercise it). Everything under Expansion offerings is a surface Hive could stand up with Chime, not a service running yet.

Jade · member copilot

Receipts on proactive actions

Running nowReceipt Relay · InkFrame v1 · CarnacPrompt™ · Proof Pre-Fill
Expansion offeringsConsent-trace model receipts · AFiR assistant-action proof · permitted-next-action routing
Disputes · Reg E

Examiner-ready evidence packets

Running nowR3Pv proof vector · Protected Flow assess · signed evidence export
Expansion offeringsContent-sealed dispute bundle registry · network-portable Reg E packets
Fraud · trust and safety

Provable risk interventions

Running nowProtected Flow decision classes · healing-state vector · Arrival Countersignature
Expansion offeringsProtected Flow Fleets · SmartAgent route proof · cross-institution trust signals
ChimeCore · bank partners

Money-movement receipts

Running nowReceipt Relay money-movement events · meter quote · verify round-trip
Expansion offeringsBank-partner-held receipt registry · PPR · SRPR · jurisdiction-held evidence
Archimedes · engineering agents

Attested agent build actions

Running nowCarnac™ · Carnac Gateway™ · typed cue edges · gateway receipts
Expansion offeringsProvable Machines · agent-fleet proof · build-control-execution receipts
Galileo · data pipelines

Pipeline control receipts

Running nowInkFrame Non-Mutation · Disclosure-Free Replay · benchmark evidence
Expansion offeringsData-quality-check receipts · AFiR-Stream · OriginProof for RDF batches
the fuller offer · buyer-readable primitive cross-reference · no need to leave this page

Every Hive primitive, mapped to a Chime surface.

The four Filings under InkFrame v1 are the fastest path in. The canon is broader. This is the whole map, kept on this page: each primitive, the Chime surface it fits, what it does now, and what it could do next.

Open the full primitive cross-reference
Hive primitive × Chime surface · running now and expansion
Hive primitiveChime surfaceStateWhat it does
InkFrame v1All surfacesRunning nowThe signed receipt frame: content-addressed roots plus a hybrid Ed25519 + ML-DSA-65 signature. The verifier above builds and checks one.
Proof Pre-FillJade · ChimeCoreRunning nowFiling A. The receipt is attached at the moment of the action, so it adds no delay to a member's flow.
InkFrame Non-MutationGalileo · disputesRunning nowFiling B. One changed byte fails the check. This is the tamper test in the verifier.
Disclosure-Free ReplayGalileo · fraudRunning nowFiling C. Reconstruct the route from fingerprints alone, with no raw member text.
Arrival CountersignatureFraud · ArchimedesRunning nowFiling D. The gateway countersigns on arrival, so what ran is what was cleared.
Receipt RelayChimeCore · disputesRunning nowSigns an event into a portable receipt. Step 1 of the live workflow above.
R3Pv proof vectorDisputes · fraudRunning nowGroups signed receipts into one signed vector: verification, policy, healing, routing, and permitted next action.
Protected FlowFraud · ChimeCoreRunning nowTurns the vector into a signed decision (permit, hold, recover, escalate) under a policy pack, with a meter quote. No funds move.
Evidence ExportDisputes · Reg ERunning nowBundles the vector, assessment, receipts, and pubkeys into a signed bundle an examiner re-verifies offline.
Carnac™Archimedes · JadeRunning nowSizes how much proof an action deserves. It does not judge.
CarnacPrompt™JadeRunning nowFingerprints the prompt as a one-way SHA-256, never the words.
Carnac Gateway™ArchimedesRunning nowThe gateway that countersigns agent and model traffic on arrival.
SmartAgent route proofFraud · ArchimedesExpansionProof for multi-step agent behavior across a route.
Protected Flow FleetsFraudExpansionFleet-scale protected-flow decisions across many concurrent reviews.
AFiR-StreamGalileoExpansionStreaming receipt proof for high-volume pipeline batches.
OriginProofGalileoExpansionOrigin attestation for RDF batches and data-quality checks.
PPR · SRPRChimeCore · bank partnersExpansionPayment and settlement provenance receipts for money movement.
Sovereign Receipt RegistryBank partners · Reg EExpansionJurisdiction-held or partner-held receipt registry.
Provable MachinesArchimedesExpansionBuild-time control-execution receipts for the software factory.

Running now surfaces are exercised by the verifier and live workflow on this page. Expansion surfaces are options to weigh with counsel and Chime's compliance function; none is a live service today.

current source-linked evidence · first-party Chime sources · re-verify before external use

Every claim on this page points to a Chime source.

These are Chime's own words, public as of July 2026. Hive draws no conclusion about Chime beyond what these state, and does not imply Chime is a customer, partner, or endorser.

Jade is Chime's AI co-pilot, rolling out now, moving from reactive tools to proactive financial management.
Archimedes is Chime's AI-native software factory. 84% of the code shipped in March was AI-developed, up from 29% four months earlier.
Average dispute resolution time dropped more than 50%, from ~42 minutes to under 20, on Chime's AI-powered disputes platform.
AI-powered fraud detection and risk scoring helped reduce fraud losses 29% since 2022, with final enforcement under established rules and human oversight.
Chime describes a culture of trust and safety, with compliance and consumer protection as a long-standing commitment.
Transaction records flow from Galileo over SFTP through a modern data-warehouse stack, with data-quality checks that fail the job on error.
ChimeCore powers everything from the ledger to the app, so Chime can move money, extend credit, and stop unwanted charges with a member's permission.
Full Q1 2026 results, for the surrounding financial context.

One question, that is all

Is there room, beside ChimeCore and the AI Chime already runs, for an independent proof service that signs each action and never moves the member data underneath? Not instead of anything Chime built. A neutral layer that makes the control plane provable to a member, a bank partner, and an examiner.