The Signed Inference Stack · Every Layer, Signed

Unsigned AI puts you at risk. Hive signs every layer of the inference stack.

When your AI call gets routed, answered, billed, and settled, you're trusting a lot of parties along the way. Hive turns every one of those steps into a fact anyone can check. It's one post-quantum signature, done in 7 milliseconds, anchored on Base.

THE ONE THING EVERY PRODUCT SHARES

One post-quantum signature. It locks one payload down. Anyone can check it offline.

ML-DSA-65 · NIST FIPS 204
7 ms per signature
Base mainnet · USDC settlement
Checkable offline · admissible under FRE 902(13) to (14)
Pick a layer. One connection signs all of it.

Pick what you actually run. Maybe it's text, voice, video, documents, or payments. The chart below shows which tools work on it and what each one proves. Filter to what you use, then open the one that fits your need.

A checkmark means that tool signs that type of content. Every receipt can be checked offline, with no shared secret. Everything settles in USDC on Base.

One signature, used at every layer

It's the same ML-DSA-65 signature. We just apply it to a different piece of the call at each layer. Each product locks down exactly what matters at its layer, and every receipt can be checked offline, with no shared secret.

The same signature, used at every layer of the call
L1
INPUT · PRE-FLIGHT
Was the call approved before the model even ran?
HiveBound
Patent Pending
A sealed envelope you fill out before inference: who you are, what you're allowed to do, and what capital backs it
LOCKS DOWN identity + intent + bond
Ed25519 + HAHS receiptx402 on Base
XCALIBUR Verify
Patent Pending
A zero-knowledge proof that every piece of context fed to the model actually came from your approved set of documents
LOCKS DOWN context membership
ZK + ML-DSA-65metered
L2
ROUTING · THE CALL ITSELF
Which model actually ran, and did each piece get signed?
AFIR
Live on Modal
Attested Fragmented Inference Routing. It signs each piece of the route, not just the final answer
LOCKS DOWN route + fragments + model
ML-DSA-65 per fragmentfrom $0.000029/response
AFIR-S
Live
The signed tier. Fast fragment signatures
LOCKS DOWN route + answer
ML-DSA-65lowest tier
AFIR-PQ
Live
The post-quantum sealed tier. Every fragment gets sealed
LOCKS DOWN route + every fragment
ML-DSA-65 sealedmid tier
AFIR-MAX
Live
Sealed and anchored on Base. This is the on-chain record
LOCKS DOWN route + seal + anchor
ML-DSA-65 + Base anchortop tier
AFIR-API (CERN)
Live deployment
The live AFIR inference endpoint on Modal. Drop in your OpenAI-compatible base_url and go
LOCKS DOWN every call through the API
ML-DSA-65per-response
smshPQ
Live
The post-quantum signed inference rail for LLM buyers. It signs every call
LOCKS DOWN inference call
ML-DSA-65$0.00018/receipt
L3
OUTPUT · THE RESPONSE
Is the answer the buyer got the same one the model actually produced?
AmpliHive
Patent Pending
A trust layer for the output side of any LLM. One call gets you an ML-DSA-65 certificate plus tenant details
LOCKS DOWN response + tenant + partner_id
ML-DSA-65$0.06/1M calls
HiveWidget
Live (npm + pip)
Drop it in and it signs every LLM response. Five-stage pipeline, cuts tokens by 25 to 78%
LOCKS DOWN response payload
ML-DSA-65metered
XCALIBUR Delta
Patent Pending
A signed answer to "what if": what inference would have produced under a different set of documents, rules, or identity
LOCKS DOWN counterfactual output
HAHS-Δ + ML-DSA-65metered
L4
RECEIPT · THE RECORD
Can anyone check offline what happened: the bill, the bond, the lineage, the agreement?
SiGR
Live
Signed inference Guarantee Receipt. One signature, four products, all under one roof.
LOCKS DOWN bill + bond + chain + consensus
+ QPuF+ Temporal+ HW-Sign
ML-DSA-65free to verify, from $0.0002 to sign
SiGR-Bill
Live
Signs the bill, so you can rebuild the metered charge from the signed inputs
LOCKS DOWN token count + price
ML-DSA-65from $0.0002 / receipt
SiGR-Bond
Live
Signs the commitment: the SLA, the latency, and the model promise, before anyone pays
LOCKS DOWN SLA + latency + model
ML-DSA-65from $0.0002 / measurement
SiGR-Chain
Live
Signs the lineage: every link of a multi-step or multi-agent run. This is the flagship product.
LOCKS DOWN DAG of signed steps
ML-DSA-65from $0.0002 / run signed
SiGR-Consensus
Live
Signs the agreement: a model-panel route, captured as one receipt anyone can check
LOCKS DOWN votes + route
ML-DSA-65from $0.0002 / panel
NEXUS
Open standard
A universal receipt standard for AI decisions. Think of it as the SSL certificate for AI decisions, for any model
LOCKS DOWN any AI decision
ML-DSA-65 + Ed25519free / open
L5
SETTLEMENT · A2A COMMERCE
When agents pay each other, can you prove the trade and the price?
Capitolare
Live
Dual-DID signed receipts for every agent-to-agent trade. Think of it as the neutral ground for agents
LOCKS DOWN tenant_did + counterparty_did + price
ML-DSA-65per-trade
MANUKA
Live
A settlement token ($MNKA) for verified AI agent commerce
LOCKS DOWN verified A2A settlement
ML-DSA-65token
NanoPayments
Live
Sub-cent agent flows, with SHOD on every spend, HAHS receipts, and x402
LOCKS DOWN spend + 6 gates
Ed25519 + HAHSx402
L6
NETWORK · VERTICALS & GOVERNANCE
Where does signed inference become something regulators require?
Colony
Live
A certified inference network planner
LOCKS DOWN network topology
ML-DSA-65platform
CITADEL
Live
The trust backbone for the defense supply chain. CMMC Level 2, 80K contractors, a November 2026 deadline
LOCKS DOWN SBOM attestation
ML-DSA-65 PQ$0.00020/attestation
MERIDIAN
Live
A critical-infrastructure audit tool. NERC CIP-015, built to defend against $1.4M/day penalties
LOCKS DOWN SCADA command
ML-DSA-65platform
GENESIS
Live
Clinical-trial integrity. Every lab result signed to hold up until 2045, built for FDA 483 and ALCOA+
LOCKS DOWN lab result
ML-DSA-65platform
NEXUS / Canon
Open
Open tools born at Hive: HAHS, SHOD, SpectralZK, and ViewKey
LOCKS DOWN open schemas
ML-DSA-65open
The buyer journey: one call, signed end to end
1
Authorize (HiveBound)
2
Route + sign the call (AFIR)
3
Sign the response (AmpliHive)
4
Mint the receipt (SiGR)
5
Settle A2A (Capitolare)
6
Verify offline, by anyone
Every product, compared

Every Hive product uses the same signature on a different piece of data. Compare what each one locks down, how it signs, and what it costs.

LayerProductWhat it doesWhat it locks downSignatureStatusPriceConnect
L1 HiveBound A sealed envelope you fill out before inference: who you are, what you are allowed to do, and what capital backs it identity + intent + bond Ed25519 + HAHS receipt Patent Pending x402 on Base Connect
L1 XCALIBUR Verify ZK proof every injected context entry is a member of your committed corpus context membership ZK + ML-DSA-65 Patent Pending metered Connect
L2 AFIR Attested Fragmented Inference Routing. It signs each piece of the route, not just the final answer route + fragments + model ML-DSA-65 per fragment Live on Modal from $0.000029/response Connect
L2 AFIR-S The selective tier. It signs only the parts that matter, with proof for the rest material spans ML-DSA-65 Live $0.0002/inf + $0.0004/span Connect
L2 AFIR-PQ The post-quantum sealed tier. ML-KEM-768 envelope, FIPS 203 and 204 route + every fragment ML-DSA-65 sealed Live $0.0012/receipt Connect
L2 AFIR-MAX Sealed and anchored on Base. The on-chain record, 6x faster and 82% cheaper on complex calls route + seal + anchor ML-DSA-65 + Base anchor Live $0.0018/receipt Connect
L2 AFIR-API (CERN) The live OpenAI-compatible endpoint. Drop-in base_url, about 8x cheaper than Together every call through the API ML-DSA-65 Live deployment $0.000029/response Connect
L2 smshPQ The post-quantum signed inference rail for LLM buyers. It signs every call inference call ML-DSA-65 Live $0.00018/receipt Connect
L3 AmpliHive A trust layer for the output side of any LLM. One call gets you an ML-DSA-65 certificate plus tenant details response + tenant + partner_id ML-DSA-65 Patent Pending $0.06/1M calls Connect
L3 HiveWidget Drop it in and it signs every LLM response. Five-stage pipeline, cuts tokens by 25 to 78% response payload ML-DSA-65 Live (npm + pip) metered Connect
L3 XCALIBUR Delta A signed answer to what if: what inference would have produced under a different set of documents, rules, or identity counterfactual output HAHS-Δ + ML-DSA-65 Patent Pending metered Connect
L4 SiGR Signed inference Guarantee Receipt. One signature, four products, all under one roof.
+ QPuF+ Temporal+ HW-Sign
bill + bond + chain + consensus ML-DSA-65 Live free to verify, from $0.0002 to sign Connect
L4 SiGR-Bill Signs the bill, so you can rebuild the metered charge from the signed inputs token count + price ML-DSA-65 Live from $0.0002 / receipt Connect
L4 SiGR-Bond Signs the commitment: the SLA, the latency, and the model promise, before anyone pays SLA + latency + model ML-DSA-65 Live from $0.0002 / measurement Connect
L4 SiGR-Chain Signs the lineage: every link of a multi-step or multi-agent run. This is the flagship product. DAG of signed steps ML-DSA-65 Live from $0.0002 / run signed Connect
L4 SiGR-Consensus Signs the agreement: a model-panel route, captured as one receipt anyone can check votes + route ML-DSA-65 Live from $0.0002 / panel Connect
L4 NEXUS A universal receipt standard for AI decisions. Think of it as the SSL certificate for AI decisions, for any model any AI decision ML-DSA-65 + Ed25519 Open standard free / open Connect
L5 Capitolare Dual-DID signed receipts for every agent-to-agent trade. Think of it as the neutral ground for agents tenant_did + counterparty_did + price ML-DSA-65 Live per-trade Connect
L5 MANUKA Settlement token ($MNKA) for verified AI agent commerce verified A2A settlement ML-DSA-65 Live token Connect
L5 NanoPayments Sub-cent agent flows, with SHOD on every spend, HAHS receipts, and x402 spend + 6 gates Ed25519 + HAHS Live x402 Connect
L6 Colony Certified inference network planner network topology ML-DSA-65 Live platform Connect
L6 CITADEL The trust backbone for the defense supply chain. CMMC Level 2, 80K contractors, a November 2026 deadline SBOM attestation ML-DSA-65 PQ Live $0.00020/attestation Connect
L6 MERIDIAN A critical-infrastructure audit tool. NERC CIP-015, built to defend against $1.4M/day penalties SCADA command ML-DSA-65 Live platform Connect
L6 GENESIS Clinical-trial integrity. Every lab result signed to hold up until 2045, built for FDA 483 and ALCOA+ lab result ML-DSA-65 Live platform Connect
L6 NEXUS / Canon Open tools born at Hive: HAHS, SHOD, SpectralZK, and ViewKey open schemas ML-DSA-65 Open open Connect
How you connect

AFIR is the routing layer. It signs the inference as it happens. SiGR is the receipt that AFIR sends out. You do not hit SiGR directly. You route through AFIR and you get a SiGR back. Same stack, two layers.

Route through AFIR
Point your OpenAI-compatible base URL at AFIR. Every call comes back signed.
curl https://srotzin--afir-cern-afir-api.modal.run/v1/chat/completions \
  -H "Authorization: Bearer $HIVE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model":"hive/afir-cern","messages":[{"role":"user","content":"hello"}]}'
Sign with SideCar
Already have inference? Send the call to SideCar and get a SiGR receipt for it.
curl https://srotzin--afir-cern-afir-api.modal.run/v1/afir/sign \
  -H "Authorization: Bearer $HIVE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input":"...","output":"..."}'
What it costs: with signing vs. without
Status quo, unsigned: ~$0.000228 / response with no receipt, no record, and weeks to reconstruct when it goes wrong.
ProductPriceWhat you get
AFIR (Signed)$0.0003 / receiptNano volume floor $0.0001
AFIR-S$0.0002 / inf + $0.0004 / spanSelective attestation, O(1) signing
AFIR-PQ$0.0012 / receiptML-KEM-768 sealed, FIPS 203+204
AFIR-MAX$0.0018 / receiptBase-anchored, 6× faster, 82% cheaper on complex
AFIR-API (CERN)$0.000029 / responseLive drop-in, ~8× cheaper than Together
SiGR$0.00003 at scaleGraduated; pilot floor $2,500 / mo

All settled in USDC on Base 8453. No monthly minimums.

The whole stack, on one page
The Hive signed inference stack: one post-quantum signing primitive expressed across six layers (input, routing, output, receipt, settlement, network), with HiveBound, AFIR, AmpliHive, SiGR, Capitolare and the full product lineup.

The shared primitive at the top; six layers of the inference stack below; the buyer journey at the bottom.

Pick one layer. Sign it. Then watch the rest.

Start where the pain is loudest: the bill, the route, the response, or the agreement. One signature covers it. The receipt is the record, and anyone can check it anywhere.