CNS: Compliance-Native Settlement, Build #39

Settlement that
checks itself.

The receipt and the transfer are the same object. That's the whole idea. 11.71 ms median, signed for post-quantum protection, 4 compliance controls checked per message.

11.71 ms median wall-clock 15.86 ms p99 12 frameworks 158 controls Ed25519 + ML-DSA-65 4 controls / message
11.71 Median ms (off-chain)
15.22 p95 ms
15.86 p99 ms
12.35 Off-chain mean ms
Live endpoint active
All transfer-time numbers are off-chain. On-chain Base L2 anchoring is pending. Build #39 is wiring the anchor now. The off-chain envelope is fully signed and checkable today.

The only metric that matters for compliant flows

Rail comparison: speed with compliance proof attached

Raw speed was a solved problem years ago. What matters for regulated flows is which rail delivers that speed with signed compliance proof attached. No other rail does this.

Rail Finality Cost / tx Compliance attached Provenance Post-quantum Jurisdiction-aware Per-message audit
SWIFT MT103 T+1 to T+3 $40+ None (perimeter) None No Manual Manual, days
XRP / Ripple 3 to 5 sec ~$0.0002 None None No No None
Solana ~400 ms ~$0.00025 None None No No None
Stellar 3 to 5 sec ~$0.00001 None (perimeter) None No Memo only None
Base L2 (raw) ~2 sec ~$0.0001 None None No No None
Hive CNS 11.71 ms off-chain
+ Base L2 anchor (pending)
$0.0001 to $0.0768 receipt Per-message bundle (4 controls) MAPET-X 24-axis Yes (ML-DSA-65) Yes (per-control) 6.5 ms / 158-control fleet 460 ms
The Hive CNS position: We don't beat XRP on raw speed. We beat every other rail on speed with compliance proof attached, because no other rail attaches the proof to the message.

How it works

One request, signed twice, with compliance built in

From submission to settled receipt: one request, 4 compliance controls checked at the same time, hashed with SHA3-256, signed with both Ed25519 and ML-DSA-65, and priced by Sphere tier. The whole pipeline runs in milliseconds, not days.

Off-chain timing: The median wall-clock of 11.71 ms covers steps 1 to 7 (validate → audit → sign twice → Sphere). The Base L2 anchor (step 8) adds about 2 seconds once it's wired up. The signed envelope can be checked without waiting for on-chain confirmation.

Real settled transfer

One live envelope, every field

A real settled transfer with its full compliance bundle. Four compliance controls checked, all passed, signed twice, priced by Sphere tier, with a verifier URL attached. This is not a mock.

Settled
transfer_id: cns_49bb822f53c94e7a94ca9896d609aca2
submitted_at: 2026-05-09T05:35:00Z  ·  settled_at: 2026-05-09T05:35:00Z
11.73
wall-clock ms (off-chain)
Transfer details
did:hive:treasury:0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E
did:hive:counterparty:0xabc123
USDC  ·  base-8453
$250,000.00 USDC
trade-settlement
[ "US", "SG" ]
Compliance bundle: 4 controls checked
controls_audited: 4 All passed score: 75.0
CC6.2 ✓ Pass
KYC / AML: identity check of both DIDs against known registries
sha3-256 3a7f91c0d4e2b85a...
ed25519 zEjn/lJWH9DHAB...
ml-dsa-65 RFNBLVNUVUItOW...
CC9.2 ✓ Pass
Sanctions / counterparty screening: OFAC, EU, UN consolidated list check
sha3-256 9c2e48b1d5f7a03c...
ed25519 mKpQ7xNvBcLT2j...
ml-dsa-65 U1RVQi05ZTdmYm...
A.5.31 ✓ Pass
Jurisdiction compliance: US/SG jurisdiction pair checked per control
sha3-256 1d8b73e2c9a4f6d0...
ed25519 nRsV2hWpXaGf8q...
ml-dsa-65 YWUxZmE5YTliNz...
A.5.34 ✓ Pass
Privacy / data minimization: PII handling and cross-border data flows
sha3-256 5f2a09c4e8b1d73a...
ed25519 wLcM4yZkDhNb6p...
ml-dsa-65 ODdlY2E2YjE5Mm...
Settlement envelope: Sphere: Cathedral · cost: $0.0048 · anchor: base-8453
SHA3-256
2009b21ea2dcc92cf45c5a09411d6a07… (truncated for display)
Ed25519
zEjn/lJWH9DHABJRNbmUhHgG5MAwX5TT… (truncated for display)
ML-DSA-65 (post-quantum)
RFNBLVNUVUItOWQ3YmFlMWZhOWE5Yjc4… (truncated for display)
Verifier: thehiveryiq.com/verifier/?tx=cns_49bb822f53c94e7a94ca9896d609aca2

Receipt pricing

Sphere tier ladder: receipt cost scales with transfer value

Nine Sphere tiers get picked automatically based on the transfer amount. The receipt cost always stays tiny next to the transfer value. The compliance proof costs next to nothing at any scale that matters.

"Receipt cost is always negligible vs transfer value. A $5B settlement pays $0.0768. That is 0.0000000015 percent."

Sphere Transfer threshold Receipt cost (USD)
Whisper < $50 $0.0001
Echo $50 to $500 $0.0008
Cipher $500 to $5,000 $0.0012
Thunder $5,000 to $50,000 $0.0024
Cathedral $50,000 to $500,000 $0.0048
Constellation $500,000 to $5M $0.0096
Nebula $5M to $50M $0.0192
Galaxy $50M to $500M $0.0384
Genesis > $500M $0.0768
The Sphere tier gets picked automatically from the transfer amount. You can override it with "sphere": "Genesis" on any amount if you need the highest provenance tier no matter the size. You always control that override yourself.

Cost comparison

What if 5 percent of a $1B/month treasury switched to Hive CNS?

Here's the setup: a treasury running $1B a month in cross-border transfers moves 5 percent of that, $50M a month at an average ticket of $250K, to Hive CNS. Here's the math.

Scenario: $50M/month, average ticket $250K, 200 messages/month
SWIFT MT103
Wire fees (200 × $40) $8,000/mo
BIC licence (~$1,500/yr) $125/mo
3-day float on $50M at 5.4% risk-free ~$22,500/mo
Total monthly cost ~$30,625/mo
Annualised ~$367,500/yr
No compliance proof attached. Audit reconstruction is manual, takes days.
Hive CNS
200 × $0.0048 (Cathedral) $0.96/mo
Settlement risk (11.71 ms) ~$0/mo
BIC / correspondent fees $0
Total monthly cost $0.96/mo
Annualised $11.52/yr
Compliance proof attached to every message. Auditor receives the bundle, not a reconstruction.
Net savings (5% flow)
Fee savings / month ~$8,125/mo
Float savings / month ~$22,500/mo
Annual savings (5% flow) ~$365K/yr
Full $1B/mo linear ~$7.3M/yr
Plus compliance proof quality Included
Linearly: full $1B/mo flow saves ~$7.3M/yr in fees and carrying cost.

The Hive flow has a signed compliance proof attached to every message. SWIFT only checks compliance once the transfer reaches the bank's perimeter. The audit isn't just cheaper on Hive. It's a better audit.


Thesis

Why per-message compliance changes everything

Every settlement rail before Hive CNS has the same problem: compliance sits apart from the transaction. On SWIFT, compliance happens at the bank's perimeter. A person reviews the transfer, usually days after it already cleared, against a set of rules someone updates by hand. If something's wrong, the team has to rebuild the audit trail after the fact, from logs, from memory, from a trail that was never built to be checked. SWIFT moves money. It doesn't move proof.

That's not a knock on SWIFT as a network. It's just how it was built. The MT103 message format dates back to the 1970s. Compliance as a field didn't look anything like it does now. Every correspondent-banking message standard assumes compliance is something a bank's people do, not something a message carries with it the moment it's sent.

The crypto rails made this worse, not better. XRP, Solana, Stellar, and Base L2 in raw form carry no compliance at all. They're faster than SWIFT. They're also unusable for regulated institutional flows, because there's no audit trail attached to the message. A bank that settles a cross-border institutional transfer on Solana has a settlement receipt. It doesn't have a compliance receipt. That gap is a dealbreaker for institutional adoption at regulated firms today.

The result is a split world: fast rails with no compliance, slow rails with compliance bolted on at the edge. Treasury teams, market-makers, and cross-border B2B operators get stuck choosing between speed and an audit trail. They can't have both.

Hive CNS gets rid of that choice. The compliance proof doesn't happen after the transfer. It happens inside the message. When a transfer request hits the CNS endpoint, the AEGIS engine runs four compliance checks at the same time: CC6.2 (KYC/AML identity check), CC9.2 (sanctions and counterparty screening), A.5.31 (jurisdiction pair check), and A.5.34 (privacy and data minimization). Each check produces its own signed evidence envelope. The four envelopes get bundled together, then hashed with SHA3-256. That hash gets signed with Ed25519, then signed again with ML-DSA-65, the NIST-standard signature built to resist quantum computers. What comes out is a settlement receipt that carries its own proof that it passed compliance.

That matters for the auditor. On SWIFT, an auditor who needs to check a transfer's compliance history submits a request, waits for a bank to piece the evidence back together from logs, and gets a document a person assembled after the fact. On Hive CNS, the auditor gets the bundle that was produced the moment the transfer settled. Nothing gets rebuilt. The evidence is the message.

This is also the rail for agent-to-agent commerce. When one AI agent pays another, for compute, for data, for a step in an agentic supply chain, it shouldn't have to wait 24 to 72 hours for a person to review compliance. That wait doesn't just cost money. It breaks the whole point of an agentic system, which is built to act in near real time. Put a human compliance review in the middle of an agent payment loop and you've broken the loop. Hive CNS solves this at the message level: compliance gets checked the moment the transfer happens, signed into the envelope, and any downstream agent or auditor can check it without a human in the middle.

The 11.71 ms median isn't the point, even though it's a good number. The real point is that 11.71 ms is also how long it takes to produce a signed compliance proof. In the time it takes a SWIFT-grade bank to even notice a wire cleared, Hive CNS has submitted, checked, signed, priced, and settled the transfer, with the receipt already sitting in the auditor's hands.

The Hive CNS pitch isn't that this rail beats SWIFT on raw speed alone. It's faster than SWIFT with compliance attached. It's faster than XRP with compliance attached. It's faster than Solana with compliance attached. No other rail can say that, because no other rail puts the compliance inside the message.

That's what the Sphere tier system is for. Receipt cost scales with transfer value because the compliance work, the provenance needed, and how long the post-quantum signature needs to hold up all scale with transfer value too. A $50 transfer doesn't need Genesis-tier provenance. A $5B settlement does. The Sphere ladder keeps the receipt cost a tiny fraction of the transfer no matter the tier, while making sure the compliance work matches the risk of the amount moved.

Steve Rotzin, an attorney and inventor with thirty years in legal and IP strategy, designed this architecture. The insight behind it was a legal one, not a technical one: if you have to rebuild compliance evidence after the fact, it isn't evidence anymore. It's a story someone tells. Hive CNS replaces that story with a signed object. That signed object is the receipt. The receipt is the transfer. That's what settlement that checks itself means.


API access

How to consume the CNS endpoint

Three curl commands. Health check, benchmark, and a full transfer request with compliance bundle. The live backend is at receipts.thehiveryiq.com/v1/cns/benchmark.

GET /v1/cns/health: system health check
curl -s https://receipts.thehiveryiq.com/v1/cns/health | jq
GET /v1/cns/benchmark: rolling p50/p95/p99 latency
curl -s https://receipts.thehiveryiq.com/v1/cns/benchmark | jq
POST /v1/cns/transfer: full compliance-bundled settlement
curl -X POST https://receipts.thehiveryiq.com/v1/cns/transfer \
  -H 'Content-Type: application/json' \
  -d '{
    "from_did":           "did:hive:treasury:0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E",
    "to_did":             "did:hive:counterparty:0xabc123",
    "asset":              "USDC",
    "chain":              "base-8453",
    "amount":             "250000.00",
    "purpose":            "trade-settlement",
    "jurisdiction_pair": ["US", "SG"]
  }' | jq
Example response shape
{
  "transfer_id":  "cns_49bb822f53c94e7a94ca9896d609aca2",
  "status":       "settled",
  "wall_clock_ms": 11.73,
  "off_chain_ms":  11.73,
  "compliance_bundle": {
    "controls_audited": 4,
    "all_passed":       true,
    "score":            75.0,
    "envelopes": [ /* CC6.2, CC9.2, A.5.31, A.5.34, each with sha3, ed25519, ml_dsa_65 */ ]
  },
  "settlement_envelope": {
    "sha3_256":          "2009b21ea2dcc92cf45c5a09411d6a07...",
    "ed25519_signature": "zEjn/lJWH9DHABJRNbmUhHgG5MAwX5TT...",
    "mldsa65_signature": "RFNBLVNUVUItOWQ3YmFlMWZhOWE5Yjc4...",
    "sphere_tier":       "Cathedral",
    "sphere_cost_usd":   0.0048,
    "anchor_chain":      "base-8453",
    "verifier_url":      "https://thehiveryiq.com/verifier/?tx=cns_49bb822f53c94e7a94ca9896d609aca2"
  }
}

Honest disclosures

What is live, what is pending, what is honest

Hive Civilization believes in disclosing the current state of every system accurately. Here is the full picture for CNS as of Build #39.

  • Off-chain envelope: fully live. Live The transfer, the AEGIS compliance bundle, the SHA3-256 hash, the Ed25519 signature, and the ML-DSA-65 post-quantum signature all get computed and returned in the settlement envelope today. Every number on this page is off-chain. The verifier at thehiveryiq.com/verifier/ can check any signed envelope without waiting for on-chain confirmation.
  • On-chain Base L2 anchoring: pending. Pending Base L2 anchor wiring is in progress as part of Build #39. Once it's live, each settlement envelope will be anchored on Base L2 (chain 8453) with an on-chain transaction hash included in the response. The off-chain envelope is already valid and checkable without the anchor. The anchor adds permanence and lets anyone check it publicly at Base L2 finality, about 2 seconds. This is not a mock. Anchor wiring is the only piece left to finish.
  • Default compliance set. Live The default set checks 4 controls per message: CC6.2 (KYC), CC9.2 (sanctions/counterparty), A.5.31 (jurisdiction), A.5.34 (privacy). You can run the full 158-control AEGIS fleet scan via /v1/aegis/scan, and it returns in 460 ms. You can also request any subset of controls on any transfer message.
  • AEGIS machine-verification rate. Live 32.9 percent of AEGIS controls are machine-verified today. 67.1 percent are operator-attested with a score of 0.5. That's the honest current state. The bundle score of 75.0 on the live sample transfer reflects that mix. For the full per-control breakdown, see the compliance dashboard. For the control-by-control inventory, see SOC 2 Self-Attested and ISO 27001 Self-Attested.
  • All transfer-time numbers are off-chain. Verified Median 11.71 ms, p95 15.22 ms, p99 15.86 ms, off-chain mean 12.35 ms. These numbers come from the live benchmark endpoint, which runs a test transfer once a minute. None of these numbers include on-chain time. We'll report on-chain time separately once Base L2 anchor wiring ships.
  • Not a blockchain. Hive CNS is not a new blockchain. Base L2 is the chain. Hive CNS is the compliance-native envelope that wraps the transfer. The distinction matters: Hive proves things happened. It doesn't keep the ledger.
  • Not for retail. This rail is designed for treasuries, market-makers, cross-border B2B operators, and agent-to-agent commerce where compliance proof is a first-class requirement. It is not a consumer payment system.

Get started

Settlement that proves itself. Run a benchmark now.

The benchmark endpoint is public, live, and runs a real signed transfer every minute. Hit it and see the numbers for yourself. No registration, no rate limit on benchmark reads.


THE HIVE FAMILY

CRE is one surface. Here's the family it belongs to.

Every Hive surface signs its own evidence with the same primitives: SHA3-256 canonical hashing, Ed25519 + ML-DSA-65 dual signatures, and a published Merkle Mountain Range root. The receipt is the audit evidence. The same envelope pattern works across every transaction, every framework, every surface.