Salesforce / Use Cases / 07 · Agency contract officer signs a milestone acceptance

07 STANDARD Public Sector

Agency contract officer signs a milestone acceptance

FOIA-portable. OIG-verifiable. The receipt is the audit trail, with or without Salesforce.

Install in 5 minutes Build a variant in the Factory

01Scenario

A US-CA state contracting officer's Agentforce agent signs contract.milestone.accept on a Contract record. The vendor org sees the inbound receipt and can now invoice (or, on Nano, gets paid right away).

You can answer a FOIA request from a journalist or watchdog group just by exporting the receipt JSONL. The receipt is signed by a credentialed officer (license/employee-id pill) and tied by action_ref to the specific milestone in the SOW.

OIG audits can trace contractor performance through receipt chains instead of email screenshots. Each milestone is a portable, signed, dated record. The agency never has to expose its Salesforce instance to the auditor.

02Handles

action_type: contract.milestone.accept
handle: HiveReceiptMinter
lands on: Contract
rail: STANDARD $0.50/receipt, Hive-billed

03APEX

Contract con = [SELECT Id, ContractNumber, AccountId, Account.Name,
                          Owner.Name, Milestone__c, SOW_Line__c
                   FROM Contract WHERE Id = :contractId];

Map<String, Object> payload = new Map<String, Object>{
  'contract_number'   => con.ContractNumber,
  'milestone'         => con.Milestone__c,
  'sow_line'          => con.SOW_Line__c,
  'officer_name'      => con.Owner.Name,
  'officer_id_hash'   => HiveHash.sha256(stateOfficerId),
  'fiscal_obligation' => fiscalYearObligation,
  'cfda_program'      => cfdaProgramCode
};

Id receiptId = HiveReceiptMinter.mint(
  con.Id,
  'contract.milestone.accept',
  'did:hive:0xVendorOrgAgent',
  'salesforce:contract:' + con.Id,
  payload
);

// FOIA-portable: receipt.Jurisdiction__c = 'US-CA'
// OIG-portable: action_ref can be computed from the SOW line and ms timestamp

04Flow XML

<Flow xmlns="http://soap.sforce.com/2006/04/metadata">
    <processType>AutoLaunchedFlow</processType>
    <start>
        <object>Contract</object>
        <recordTriggerType>UpdatedAndConditionMet</recordTriggerType>
        <filters>
            <field>Status</field>
            <value><stringValue>Milestone Accepted</stringValue></value>
        </filters>
        <triggerType>RecordAfterSave</triggerType>
        <connector><targetReference>mint_milestone</targetReference></connector>
    </start>
    <actionCalls>
        <name>mint_milestone</name>
        <actionName>HiveReceiptMinter</actionName>
        <actionType>apex</actionType>
    </actionCalls>
    <status>Active</status>
</Flow>

05The receipt that lands in Hive_Receipt__c

{
  "agent_id": "did:hive:0xCAOfficerAgent",
  "counterparty_did": "did:hive:0xVendorOrgAgent",
  "action_type": "contract.milestone.accept",
  "scope": "salesforce:contract:8001p0000Z3R",
  "jurisdiction": "US-CA",
  "verification_status": "VERIFIED"
}

06Verification

FOIA-style verification: a journalist with the JSONL and the public key

# receipt.json must use the live field names: receipt_id, payload_sha256, sig_b64u, ts
curl -sS https://receipts.thehiveryiq.com/v1/receipt/verify \
  -H 'content-type: application/json' \
  --data-binary @milestone_receipt.json

# expected: {"verified":true,"jurisdiction":"US-CA","officer_id_hash_present":true}

07Economics

Per-milestone fee	$0.50 (Standard)
Agency cap	$499/mo. Small agencies are typically under the free tier
Procurement compatibility	GSA SmartPay / Pcard / standard P.O. paths unchanged
Audit savings	OIG audits that used to need full system pulls can now be answered from a JSONL export
Vendor portal compatible	Vendor org receives INBOUND receipt; can post on AppExchange storefront

08Compliance and audit shape

FOIA-portable: a single JSONL line answers "who accepted what milestone, when."
The officer's identity is hashed, so the raw employee ID never leaves the agency.
A receipt-chain audit takes the place of an email-thread audit for milestone acceptance.
CJIS, ITAR, FedRAMP overlays available via jurisdiction picklist.

09Trust anchors

Every claim on this page is verifiable against these public constants. No login. No NDA.

Rail	STANDARD: $0.50/receipt, Hive-billed
Hive Ed25519 pubkey	`fd9d10abe60de7510c61ef649c8da598a519468dd2a2b827106d76487a899444`
Canonicalization	RFC 8785 JCS over the JSON receipt body
Signature algorithm	Ed25519 (RFC 8032)
Backend root	https://receipts.thehiveryiq.com
Verify any receipt	thehiveryiq.com/verify
MIT starter	thehiveryiq.com/salesforce/install
Billing	$0.50/receipt, 100/mo free, $499/mo cap. Buyer picks Square invoice or monthly ACH.
Pricing	thehiveryiq.com/pricing