SiGR™ · Signed inference Guarantee Receipt

Every package gets
a receipt.
Every inference
should too.

SiGR™ makes every AI inference call cryptographically accountable. It is a post-quantum signed receipt that proves exactly what the model saw, when, and which backend signed it. Anyone can check it. No one can fake it.

ML-DSA-65 · FIPS 204 ~7ms sign-before-act Base L1 · USDC settled Zero-secret verification
The artifact
SiGR // INFERENCE RECEIPT UNSIGNED
modelllama-3.3-70b-instruct
payload_hash0x9f3a…c7e1
captured_at2026-06-18T14:22:07.118Z
backendhw-pqc-fpga · attested
hash_strengthSHA-384
anchorBase · 0x4d…a9 · USDC
ml_dsa_sigpending…
awaiting commitment
SIGNED
BEFORE
ACT

The model acts.
The receipt proves it.

Four properties bound inside one signature. Change any field and the proof breaks. No NDA, no shared secret, no trust required.

01Sign-before-act
The exact input and state the model saw gets locked in and signed before the model acts. It is not rebuilt after the fact.
02Post-quantum signature
ML-DSA-65 (NIST FIPS 204) over the payload in ~7ms. Built for the Q-day liability horizon, not today's.
03Honest backend attestation
The receipt names which signer ran. If the hardware backend is picked but not connected, it fails closed. There is no silent switch to software.
043-tier temporal proof
Capture → soft-commitment → L1 finality, bound inside the signature. Altering any attested time breaks the proof.
One primitive · four receipts · all live

Four things AI platforms
assert. Four things SiGR signs.

Every product below is live on the same signing endpoint right now. Each emits a post-quantum signed receipt you can verify offline with no shared secret. Copy a curl, run it, paste the envelope into the matching verify call. Verification is always free.

SiGR-Chain Flagship Live
Patent Pending
from $0.00021/ run signed · first 1M free

A signed, ordered, tamper-evident trail of an entire agent run. Every step, plan, tool call, final answer, gets hashed into a step-sealed chain and bound under one signature. Change any step, reorder them, or drop one, and the proof breaks. It is the record of what the agent saw and did before it acted, not something rebuilt after.

POST /sigr/chain · sign an agent run
# sign a multi-step agent run. returns an envelope you can verify
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/chain \
  -H 'Content-Type: application/json' \
  -d '{"run":{"run_id":"run-1","agent_ref":"research-agent-v2","steps":[
    {"step_id":"s1","kind":"plan","seq":0,"parents":[],"input":{"goal":"compare"},"output":{"plan":["a","b"]}},
    {"step_id":"s2","kind":"tool_call","seq":1,"parents":["s1"],"input":{"q":"a"},"output":{"r":"A"}},
    {"step_id":"s3","kind":"final","seq":2,"parents":["s2"],"input":{"r":"A"},"output":{"answer":"done"}}]}}'

# verify it for free, no secret needed. paste the envelope returned above
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/chain/verify \
  -H 'Content-Type: application/json' -d '{"envelope": ENVELOPE_FROM_ABOVE }'
SiGR-Bill Live
Patent Pending
from $0.00021/ receipt · first 1M free

Binds the model, the backend, the exact token counts, and the price schedule into one verifiable receipt per request. The bill stops being "trust our meter" and becomes a fact the customer, an auditor, or a regulator can check on their own. Silent model or quantization swaps get caught.

POST /sigr/bill · sign a billing receipt
# sign an inference cost / billing receipt
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/bill \
  -H 'Content-Type: application/json' \
  -d '{"request":{"request_id":"r1","model_id":"llama-3.1-70b","backend":"h100",
    "input_tokens":100,"output_tokens":50,"cached_tokens":0,
    "request_text":"...","response_text":"...","tokenizer_hash":"tok-v1",
    "price_input_micro_usd":5,"price_output_micro_usd":15,"price_cached_micro_usd":2}}'

# verify it for free
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/bill/verify \
  -H 'Content-Type: application/json' -d '{"envelope": ENVELOPE_FROM_ABOVE }'
SiGR-Bond Live
Patent Pending
from $0.00021/ measurement · first 1M free

A signed SLA bond. The latency ceiling, uptime floor, tolerance, and penalty get locked in up front, and every measurement against them is signed. When the service misses, the breach is provable and the penalty is automatic, not a renegotiation. The SLA stops being a clause and becomes a measurement anyone can check.

POST /sigr/bond · sign an SLA bond
# sign an SLA bond (accepts terms or a measurement)
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/bond \
  -H 'Content-Type: application/json' \
  -d '{"terms":{"bond_id":"bond-1","customer_ref":"acme","service_ref":"llama-70b-prod",
    "window_start":"2026-06-01","window_end":"2026-06-30","latency_ceiling_ms":500,
    "uptime_floor_ppm":990000,"slow_tolerance_ppm":100000,"penalty_micro_usd":1000000}}'

# verify it for free
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/bond/verify \
  -H 'Content-Type: application/json' -d '{"envelope": ENVELOPE_FROM_ABOVE }'
SiGR-Consensus™ Live
Patent Pending
from $0.00021/ panel · first 1M free

Signs the route of a multi-model panel: which models voted, what each produced, the method, and the result, all into one receipt. When a panel of models decides something that matters, the decision becomes a signed, replayable fact instead of a black-box vote no one can check.

POST /sigr/consensus · sign a panel route
# sign a model-panel route
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/consensus \
  -H 'Content-Type: application/json' \
  -d '{"panel":{"panel_id":"p1"},"method":"majority","members":[
    {"panel_id":"p1","model_id":"gpt-4o","output_digest":"aa","score":50,"seq":0},
    {"panel_id":"p1","model_id":"claude","output_digest":"aa","score":50,"seq":1},
    {"panel_id":"p1","model_id":"llama","output_digest":"bb","score":50,"seq":2}]}'

# verify it for free
curl -s -X POST https://hive-typed-signer.onrender.com/sigr/consensus/verify \
  -H 'Content-Type: application/json' -d '{"envelope": ENVELOPE_FROM_ABOVE }'

Public key for offline verification: GET /pubkey · every endpoint accepts an OpenAI-compatible drop-in at your API edge.

Why this is no longer optional

Right now, your platform can't prove
what it served. That's the liability.

When an enterprise customer, an auditor, or a regulator asks "what did the model actually see, and is this the model we paid for?", logs are not proof. Logs can be edited. A signature can't.

Inference without SiGR

  • Bills can't be checked. It's just "trust our meter"
  • Silent model or quantization swaps are undetectable
  • No proof of what the agent saw before it acted
  • "We don't train on your data" is a clause, not a proof
  • Every incident becomes your word against theirs

Inference with SiGR

  • Every billed unit is bound into a verifiable receipt
  • Weights + config provenance proven per call
  • Signed, ordered, tamper-evident agent action trail
  • Cryptographic data-boundary attestation
  • The receipt settles the dispute before it starts

The first platform that emits SiGRs makes the ones that don't look negligent by comparison.

Usage-based · embedded at the API edge

Priced to disappear into your margin.

Freeto verify, always  ·  first 1M receipts free  ·  from $0.00021 to sign at scale

Checking a receipt is free forever, for anyone, offline, no secret needed. You pay only to sign, and only past the free tier. One receipt equals one Bill receipt, one Bond measurement, one Chain step-sealed run, or one Consensus panel. Roll-ups are free. The metered fee gets you in the door, the license is the real deal. Usage is uncapped, with no monthly minimum and no ceiling. You pay for exactly what you sign and verify.

The table below shows the default Standard signature at each volume band. Need post-quantum (PQ) or anchored (MAX) receipts? The same volume discount applies on a higher base. See the full signature × volume matrix.

TierMonthly signed receiptsPer receipt (Standard)
Buildfirst 1MFree
Scale1M to 50M$0.00027
Platform50M to 1B$0.00024
Hyperscale1B+$0.00021 floor

The price is graduated: each band is priced at its own rate, like cloud egress. Rates shown are the Standard signature tier. PQ and MAX carry the same volume discount on their higher base. The Hyperscale floor is negotiable. Trust-tier add-ons and per-product, suite, or sovereign licenses are below.

What SiGR earns on your traffic

Drag to your monthly inference volume. This is the revenue line SiGR adds to your platform, and the cost line you bill through to enterprise customers who demand proof.

Monthly inference volume30,000,000,000
Material-fragment ratio (AFIR-S)15%
SiGR revenue / year
$97.6M
$8.13M / month
Effective rate / receipt
$0.0002710
blended across base + fragments
Trust-tier add-ons

When the receipt has to hold up
against a nation-state.

The base receipt is post-quantum and verifiable by anyone. For buyers who need entropy you can prove, time you can anchor, or signing rooted in silicon, three add-ons stack onto any SiGR product.

Live

QPuF entropy

+$0.0010 / receipt  ·  or license from $180k/yr

Quantum-derived randomness bound into the signing material, so the entropy behind every receipt is itself provable. Available per-receipt as a premium, or as a sovereign / on-prem custody license for buyers who must hold their own key material.

Live

Temporal proof

+$0.0002 soft-confirm  ·  +$0.0006 L1-anchored

Anchors the receipt's time in a checkable chain of custody: capture, soft-commitment, then L1 finality on Base. Choose soft-confirm for speed, or full L1 anchoring when the timestamp itself has to be unforgeable.

Contact us

Hardware signing

Platform / Sovereign license

Signing rooted in attested hardware with no software fallback. Available today as a software-attested backend under license; dedicated silicon acceleration is in development and not yet generally available.

Where the margin lives

The meter is the wedge.
The license is the deal.

Per-receipt pricing gets you in. When SiGR becomes load-bearing for your platform, embedded at the edge, in every enterprise RFP answer, the annual license is how serious platforms own the rail. Metered usage credits against the license.

Single product
from $120k
/ year · one SiGR product
  • One SiGR product embedded at your API edge
  • Metered usage credited against the license
  • Priority signing capacity
  • Verification SDK + drop-in header
Start the deal
Suite
from $360k
/ year · all 4 + QPuF / Temporal slots
  • All four SiGR products under one license
  • QPuF and Temporal add-on slots included
  • Highest signing-capacity tier
  • Co-marketed as a provable-inference platform
  • Roadmap input on the receipt format
Start the deal
Sovereign / on-prem
$180k to $500k+
/ year · custom
  • QPuF key custody on your own infrastructure
  • SHA-384 hardened hashing
  • Hardware-signing license
  • Air-gap and data-residency options
  • Scoped to your jurisdiction and audit regime
Talk sovereign
Get access

Free key now.
Paid at scale. Licensed when it matters.

Three paths, one rail. Start signing in under a minute on the free tier, meter on USDC over Base when you cross 1M receipts, or book a license when SiGR becomes load-bearing.

01 · Build tier

Free API key

First 1M signed receipts every month, free. Instant key, usable immediately against every live endpoint above. No card, no call.

Your Build-tier API key
02 · Scale & up

Pay per receipt

Past the free tier, metered at the graduated ladder and settled in USDC on Base, the same rail Hive uses for nano-payments. No invoices, no minimums. You pay only for what you sign.

See the ladder
03 · Platform / Sovereign

Book a license

Single-product, suite, or sovereign on-prem. Tell us your volume and jurisdiction and we will scope the deal. Metered usage credits against it.

Goes straight to Steve. Settlement is USDC on Base. No exclusivity.
Public rails: USDC + Base. Verification is free, forever, for anyone, offline, no secret.
The category, not the line item

Signed inference is a new rail.
The first to lay it owns the toll.

SiGR is not a feature you bolt on. It is the trust and accountability layer the platforms serving inference at scale will be forced to adopt to stay credible. Here's the revenue at stake as it spreads.

One challenger cloud
$92.4M
ARR from a single platform at 30B inferences/month, blended across base receipts and AFIR-S fragments.
Three adopt
$277M
Once one challenger ships provable inference, the procurement requirement propagates to its peers within an RFP cycle.
Category-wide · 10 platforms
$924M
When SiGR is the default, the platforms that don't emit receipts are the exception that has to explain itself.
The forcing function

Why the first mover wins,
and why that should be you.

01

You ship a signed-receipt header

A drop-in on your existing OpenAI-compatible API. Customers opt in per call. Zero change to your inference path beyond the ~7ms signing step, which fails closed.

02

You win an enterprise deal because the bill is provable

A regulated buyer chooses you over a hyperscaler specifically because you can prove what you served and what you charged. Trust becomes your differentiator, not your liability.

03

The requirement propagates upward

That win puts "can you emit verifiable receipts?" into every subsequent RFP. Your competitors now face a question they can't answer, and the category tips.

04

SiGR becomes the default, and you were first

You're not the platform scrambling to add accountability after an incident. You're the one who defined what accountable inference looks like. Inevitable, and yours.

The wedge

Be the platform that can
say "prove it", and mean it.

A 30-day pilot on one model family. We instrument your API edge, you emit live SiGRs on opt-in traffic, and we put a verifiable receipt in front of your most demanding enterprise prospect. If the bill, the provenance, and the timeline don't verify in front of them, you owe us nothing.

First 1M receipts free Live in 30 days From $0.00021/receipt at scale