Hive Private brief · prepared for Intercontinental Exchange The surface map → The working demonstration →

Hive Civilization · August 7, 2026

Markets settle value.
Hive settles proof.

This page has no jargon in it on purpose. If any sentence here needs a specialist to translate, that is our failure and you should say so.

The problem

Your records are fine. The problem is who wrote them.

ICE keeps very good records. That has never been the issue.

The issue is that the people who ask you hard questions are not required to take your word for it. A regulator. A custodian. A counterparty. A court. An auditor. And every answer you give them is written by you, about you, after they ask.

Right now, "prove it" means weeks of your engineers pulling records, and a letter from you saying the records are right.

Nobody is accusing anyone of anything. That is just how it works today, and it gets a little worse every time a new person asks.

How it works todayHow it works with a receipt
"Send us your logs.""Here is the receipt."
Weeks of engineering timeWritten the moment it happened
Records pulled and stitched together laterChecked in a browser, in a blink
A letter from you saying it is rightThey check it themselves
"Trust us."They never call you. They never call us.
A letter needs the person who wrote it.A receipt does not.

What a receipt is

Four steps. No magic.

A receipt is a note of what a system was told, what it checked, what it decided, and when. That is all it is.

STEP ONE

Write it down, exactly

The same event always gets written the same way, down to the last character. So anyone, anywhere, can write it out again and get an identical copy.

STEP TWO

Seal it with a fingerprint

The note gets a fingerprint. Change one comma and the fingerprint changes completely. So if someone edits it later, anyone who looks can see.

STEP THREE

Sign it

A signature seals the fingerprint. The thing you need to check the signature is published openly, so the reader checks it alone. They do not ask you and they do not ask us.

STEP FOUR

Staple it to the one before it

Every receipt carries the fingerprint of the one before it. Pull one out, swap two around, or slip one in later, and the staples visibly break.

That is the whole thing. A note anyone can check, in a browser, offline, in a blink, without trusting or even contacting whoever produced it.

Everything else on this page is that same trick, pointed at a different question.

Four places this shows up

In all four, doing the work is easy. Proving it is the hard part.

One · the trade at 2am on a Sunday

The same share is written down in two places.

On a venue that never closes, a share trades. The trade lands on a chain right away. The official record of who owns it lives somewhere else. Two books, one moment.

Months later, four people ask about that same second. The regulator asks which rule was in force. The custodian asks what the instruction said. The other side asks what filled. The transfer agent asks who owned it on the record date.

Today that is four separate pulls and someone reconciling them by hand. With receipts, all four read one signed note, each seeing only their own part, and none of them has to trust the other three.

The question it answers: did the two books agree at that exact moment? ledger.parity

Two · when software touches a real account

Software makes a change. Who says what it was allowed to do?

Software already takes real actions inside real processes, with people approving and approvals written down. Supervisors have said clearly what they expect, and the sensible answer is to bring in an outside reviewer.

Here is the catch. The report that outside reviewer reads is produced by the same process the reviewer is supposed to be checking. So the reviewer has to take it on faith.

With receipts, every action carries its own proof. Which version of the software acted. What it was allowed to do. Which safety checks ran first. And exactly what the human saw before clicking approve.

The paper trail stops being written by the people being checked.

The question it answers: what acted, was it allowed to, and what did the approver actually see? MiR · mandate.conformance

Three · you already sell this

You are already in the proof business. You sell it the old way.

Your index business writes up how it followed the benchmark rules. You hire Ernst & Young to examine that write-up. Customers get a report they are not allowed to pass around. Once a year.

That was the best tool anyone had. It is not a criticism, it is a date. It was built before you could hand someone proof they could check themselves in a second, for free, without calling anybody.

Now you can. Same promise you already make and already charge for. New way of backing it, one your customer can check on a Sunday night without asking your permission.

The question it answers: was the rule actually followed, every time, checkable by anyone, without revealing the rule? SpectralZK · effect.closure

Four · the one that makes money first

More than half of US mortgage applications run through your software.

Your own figures say Encompass collects data from over half the current market. Lenders in that pipe are starting to let software decide who gets a loan.

When a lender says no, the law says they have to give the real reason. "The computer said no" is not a reason. So every one of those lenders is about to need proof of which software decided, what it looked at, and what rule it followed.

You are already in the room. You already sell them fair lending data. This is a line on the invoice, not a project.

The question it answers: which software decided, on what, under what rule? MiR · authority.delegation

The pattern in all four: today the proof only exists once somebody goes and builds it, after the question. We write it at the moment instead, and let the doubter check it alone.

Two lists

One of these makes you money. The other saves your bacon.

Both matter. They are not the same conversation, and they do not go to the same person inside your building, so we have kept them apart.

List one

What you can sell

You already charge people to believe you. These let you charge more, and give them something better than your word.

  1. Proof of who said no on a loan Lenders letting software decide have to give a real reason when they decline. Sell them the receipt that shows which software decided and what rule it followed. You are already in their origination system. ICE Mortgage Technology · fastest money on this page
  2. A benchmark report your customer can actually check Today they get one restricted PDF a year. Sell them proof that the rule held every time, checkable by them, without revealing the rule itself. ICE Data Indices · ICE Benchmark Administration
  3. A listing badge with something behind it An NYSE listing is a trust mark. Give issuers signed proof of the obligations they met, so they can hand it straight to their own auditors and investors. NYSE · issuer services
  4. Proof the data they got is the data you sent Every feed customer eventually asks whether a number was altered in transit. Sell the answer instead of investigating it. ICE Data Services
  5. Margin math they can verify without seeing anyone's book Clearing members can confirm the calculation was done right without you exposing positions to them or them to each other. ICE Clear Credit · ICE Clear Europe
  6. The two-books receipt for tokenized settlement When a token moves and the official record sits elsewhere, one signed note proves they agreed at the same instant. This is a new product, not a fix to an old one. ICE Digital Trust · the digital asset work already announced

List two

What protects you

These earn nothing. They matter on the one day somebody asks a question you cannot answer to their satisfaction.

  1. The clock When something is found, a clock starts, and the argument is almost never about your response. It is about when you knew. Right now that time is stated by you, after the fact. Sign it at the moment instead and the timeline stops being arguable. the single highest-value item on either list
  2. Software that touched a real account The day a regulator asks what your software was allowed to do, you want the answer to already exist, signed, from before they asked. any place software acts on a live obligation
  3. An accusation about a benchmark Being able to prove the rule held, every single time, without publishing the rule, is the difference between a bad week and a bad year. the whole reason your benchmark business exists
  4. Records nobody can attack In litigation the first move against a log is that it could have been edited. Stapled, signed records take that move off the table, along with the preservation fight. legal · discovery
  5. Your own vendors You are accountable for what your suppliers do. Today you have their word. You could have their receipts. third party risk
  6. The audit itself Your auditor currently reads a package your team assembled. Hand them proof instead and the examination gets shorter, cheaper, and much harder to argue with. internal audit · external examination
  7. Fair lending, pointed back at you You supply the data lenders use to test themselves. If their software gets challenged, questions arrive at your door too. Better to hold receipts than opinions. ICE Mortgage Technology · both lists, for the same reason

If you only read one line: list two is why a careful person says yes. List one is why a commercial person says yes quickly.

List one item one and list two item one are both small enough to start on a single desk, without a platform decision and without anyone touching a production system.

What is actually running today

Every one of these is a question somebody asks you.

Not a technology. A question. If you cannot tell what question one of these answers, it should not exist.

Questions about what happened

Did this really happen in the order you say it did?

The order of events is locked against a clock outside the system being asked. It refuses to sign an ordering claim backed only by our own clock. sequence.attestation

Can four different people read one record and each see only their part?

Yes. One signed note, four sets of reading glasses. Nobody sees anyone else's slice, and it is provably the same note.ViewKey

Has anything been removed, reordered, or slipped in later?

Each note is stapled to the one before it. Tamper with the sequence and the staples break where it happened.HAHS

Can you prove you followed the rule without showing me the rule?

Yes. The check proves the rule held without revealing the rule, the strategy, or the position behind it.SpectralZK

Two of my systems disagree about the same number. Now what?

The disagreement itself gets signed. It becomes evidence instead of an argument between two teams.divergence.record

When did you first know?

The system that spotted it signs the moment it spotted it, against an outside clock, with no person in the middle who could round it.knowledge.timestamp

Questions about the software itself

Was that the version you told me you approved?

Every answer is signed by the exact version and setup that produced it. No anonymous answers.MiR

Who graded it, and was the test fair?

The grader, the test, and whether the test was clean are all recorded, so a grade is not written by the team being graded.EvAR · eval.administration

Was the test written before the software could see it?

Locked before the subject had access, and the claimed independence is recalculated rather than taken on trust.eval.administration

Did anything check this before it was allowed out the door?

A gate runs before the action leaves, and the gate leaves its own receipt. Proven, not just configured.Imprimatur

Questions about permission

Was it allowed to do that?

We do not take the caller's word for it. The permission is worked out again from scratch and compared to what actually happened.mandate.conformance

Was it allowed to do that, across ten thousand actions?

Same question over a whole book, with duplicates provably left out. mandate.aggregate

Who gave it permission, and did that permission quietly get wider?

The chain of who authorized whom is recorded, so scope cannot be widened after the fact without it showing.authority.delegation

Is there a gap anywhere between the first record and the last?

The chain is walked end to end, and if there is a break, it names where. causal.path

Was this counterparty checked, against which list, and when?

The check, the exact version of the list, the time and the answer, all signed, while who they are stays private.screening.attestation

All of it is live right now. Fifty-five of these checks are running on our own domain, and anyone can run them without an account or a key. We ran the full test suite against the live service today: 243 checks, none failed. A check comes back in a few thousandths of a second.

On the signing: we use one ordinary, widely used signature type, and we publish what you need to check it. Nothing exotic, nothing you have to install, nothing you have to ask us for.

What is not finished

The part we will not dress up.

The reason to believe the rest of this page is that we tell you this part before you ask.

Seven of them write a real receipt, but nothing is measuring yet

The receipt is real and honestly worded. It just records what it was told, because the thing that would go and measure the claim underneath does not exist yet.

  • Three of them need to watch what a machine touches, deep below the software. That part is not wired up.
  • One is meant to raise an alarm from inside software when its intent starts to drift. The probe is not attached to anything live.
  • One needs several independent organizations to approve an investigation together. No such group exists yet.
  • Three of them are just software we can build on our own, and we have not built them.

Two say "simulated" on their face, and they keep saying it

Two of these are supposed to be rooted in real hardware. There is no such hardware underneath them today, so each one reports itself as simulated, in writing, every time. It stays that way until the hardware is actually there. We do not quietly upgrade the wording.

One more, on the quantum question

We do run a quantum-safe version, and it passes its own conformance test against the US standard. It sits on one separate piece, not on all fifty-five. We would rather tell you where the line is than let you find it later.

The first step

Small enough to try. Small enough to throw away.

No platform decision. No vendor selection. Nothing changes in matching, clearing, pricing or settlement. Nothing gets gated or blocked. If we go dark, your systems do not notice.

  1. Pick one spotSomewhere an outside party already asks ICE to show its work. One is enough.
  2. Run alongside for thirty daysReceipts get written next to what you already do. No access to your systems. No customer data. Nothing plugged into any exchange or clearing environment.
  3. Hand it to whoever doubts it mostThey check it on their own. No help from you, none from us.
  4. Watch one numberHow long it takes to go from question to settled answer, before and after. If it did not shrink, walk away. The receipts still work without us.