The Signed Inference Stack · Every Layer, Signed

Receipt capture across supported inference components

When your AI call gets routed, answered, billed, and settled, you're trusting a lot of parties along the way. Hive provides different receipt profiles for those steps. Each profile has its own schema, signature, verifier, and measured limits. Receipts are signed off-chain by default; any chain anchor must be separately selected and specified.

WHAT EACH RECEIPT PROFILE MUST NAME

Inspect the payload and its declared signature.

Algorithm named by the selected profile
Measured timing belongs to the named implementation
Card and ACH · optional USDC on Base
Offline checks depend on the selected receipt profile
Pick a layer. One connection signs all of it.

Pick what you actually run. Maybe it's text, voice, video, documents, or payments. The chart below shows which tools work on it and what each one proves. Filter to what you use, then open the one that fits your need.

A checkmark means that tool signs that type of content. Verification depends on the schema and algorithm named by the selected receipt profile. Receipts are signed off-chain by default. Payment can use card, ACH, or optional USDC on Base, and the payment transaction is not the customer receipt.

Profile-specific evidence at each layer

Each product binds the fields that matter at its layer. The chosen profile must name its schema, signature, trust key, verifier, and offline resource requirements.

Each layer uses its named receipt profile
L1
INPUT · PRE-FLIGHT
Was the call approved before the model even ran?
HiveBound
Patent Pending
A sealed envelope you fill out before inference: who you are, what you're allowed to do, and what capital backs it
LOCKS DOWN identity + intent + bond
Ed25519 + HAHS receiptx402 on Base
SiGR Verify
Patent Pending
A zero-knowledge proof that every piece of context fed to the model actually came from your approved set of documents
LOCKS DOWN context membership
ZK + ML-DSA-65metered
L2
ROUTING · THE CALL ITSELF
Which model actually ran, and did each piece get signed?
AFIR
Live on Modal
Attested Fragmented Inference Routing. It signs each piece of the route, not just the final answer
LOCKS DOWN route + fragments + model
ML-DSA-65 per fragmentfrom $0.000029/response
AFIR-S
Live
The signed tier. Fast fragment signatures
LOCKS DOWN route + answer
ML-DSA-65lowest tier
AFIR-PQ
Live
The post-quantum sealed tier. Every fragment gets sealed
LOCKS DOWN route + every fragment
ML-DSA-65 sealedmid tier
AFIR-MAX
Live
Sealed and signed off-chain for offline verification. Any chain anchor must be separately selected and specified.
LOCKS DOWN route + seal + anchor
ML-DSA-65 signature. Optional anchor selected separately.top tier
AFIR-API (CERN)
Live deployment
The live AFIR inference endpoint on Modal. Drop in your OpenAI-compatible base_url and go
LOCKS DOWN every call through the API
ML-DSA-65per-response
smshPQ
Live
The post-quantum signed inference rail for LLM buyers. It signs every call
LOCKS DOWN inference call
ML-DSA-65$0.00018/receipt
L3
OUTPUT · THE RESPONSE
Is the answer the buyer got the same one the model actually produced?
AmpliHive
Patent Pending
A trust layer for the output side of any LLM. One call gets you an ML-DSA-65 certificate plus tenant details
LOCKS DOWN response + tenant + partner_id
ML-DSA-65$0.06/1M calls
HiveWidget
Live (npm + pip)
Drop it in and it signs every LLM response. Five-stage pipeline, cuts tokens by 25 to 78%
LOCKS DOWN response payload
ML-DSA-65metered
SiGR Delta
Patent Pending
A signed answer to "what if": what inference would have produced under a different set of documents, rules, or identity
LOCKS DOWN counterfactual output
HAHS-Δ + ML-DSA-65metered
L4
RECEIPT · THE RECORD
Can anyone check offline what happened: the bill, the bond, the lineage, the agreement?
SiGR
Live
Signed inference Guarantee Receipt. One signature, four products, all under one roof.
LOCKS DOWN bill + bond + chain + consensus
+ QPuF+ Temporal+ HW-Sign
ML-DSA-65free to verify, from $0.0002 to sign
SiGR-Bill
Live
Signs the bill, so you can rebuild the metered charge from the signed inputs
LOCKS DOWN token count + price
ML-DSA-65from $0.0002 / receipt
SiGR-Bond
Live
Signs the commitment: the SLA, the latency, and the model promise, before anyone pays
LOCKS DOWN SLA + latency + model
ML-DSA-65from $0.0002 / measurement
SiGR-Chain
Live
Signs the lineage: every link of a multi-step or multi-agent run. This is the flagship product.
LOCKS DOWN DAG of signed steps
ML-DSA-65from $0.0002 / run signed
SiGR-Consensus
Live
Signs the agreement: a model-panel route, captured as one receipt anyone can check
LOCKS DOWN votes + route
ML-DSA-65from $0.0002 / panel
NEXUS
Open standard
A universal receipt standard for AI decisions. Think of it as the SSL certificate for AI decisions, for any model
LOCKS DOWN any AI decision
ML-DSA-65 + Ed25519free / open
L5
SETTLEMENT · A2A COMMERCE
When agents pay each other, can you prove the trade and the price?
Capitolare
Live
Dual-DID signed receipts for every agent-to-agent trade. Think of it as the neutral ground for agents
LOCKS DOWN tenant_did + counterparty_did + price
ML-DSA-65per-trade
MANUKA
Live
A settlement token ($MNKA) for verified AI agent commerce
LOCKS DOWN verified A2A settlement
ML-DSA-65token
NanoPayments
Live
Sub-cent agent flows, with SHOD on every spend, HAHS receipts, and x402
LOCKS DOWN spend + 6 gates
Ed25519 + HAHSx402
L6
NETWORK · VERTICALS & GOVERNANCE
Where does signed inference become something regulators require?
Colony
Live
A certified inference network planner
LOCKS DOWN network topology
ML-DSA-65platform
CITADEL
Live
The trust backbone for the defense supply chain. CMMC Level 2, 80K contractors, a November 2026 deadline
LOCKS DOWN SBOM attestation
ML-DSA-65 PQ$0.00020/attestation
MERIDIAN
Live
A critical-infrastructure audit tool. NERC CIP-015, built to defend against $1.4M/day penalties
LOCKS DOWN SCADA command
ML-DSA-65platform
GENESIS
Live
Clinical-trial integrity. Every lab result signed to hold up until 2045, built for FDA 483 and ALCOA+
LOCKS DOWN lab result
ML-DSA-65platform
NEXUS / Proof Architecture
Open
Open tools born at Hive: HAHS, SHOD, SpectralZK, and ViewKey
LOCKS DOWN open schemas
ML-DSA-65open
The buyer journey: one call, signed end to end
1
Authorize (HiveBound)
2
Route + sign the call (AFIR)
3
Sign the response (AmpliHive)
4
Mint the receipt (SiGR)
5
Settle A2A (Capitolare)
6
Use the profile-specific verifier
Every product, compared

Hive products can use different receipt profiles and signatures for different data. Compare what each one claims to lock down, its named signature, status, and price.

LayerProductWhat it doesWhat it locks downSignatureStatusPriceConnect
L1 HiveBound A sealed envelope you fill out before inference: who you are, what you are allowed to do, and what capital backs it identity + intent + bond Ed25519 + HAHS receipt Patent Pending x402 on Base Connect
L1 SiGR Verify ZK proof every injected context entry is a member of your committed corpus context membership ZK + ML-DSA-65 Patent Pending metered Connect
L2 AFIR Attested Fragmented Inference Routing. It signs each piece of the route, not just the final answer route + fragments + model ML-DSA-65 per fragment Live on Modal from $0.000029/response Connect
L2 AFIR-S The selective tier. It signs only the parts that matter, with proof for the rest material spans ML-DSA-65 Live $0.0002/inf + $0.0004/span Connect
L2 AFIR-PQ The post-quantum sealed tier. ML-KEM-768 envelope, FIPS 203 and 204 route + every fragment ML-DSA-65 sealed Live $0.0012/receipt Connect
L2 AFIR-MAX Sealed and signed off-chain for offline verification. Any chain anchor must be separately selected and specified. route + seal + anchor ML-DSA-65 signature. Optional anchor selected separately. Live $0.0018/receipt Connect
L2 AFIR-API (CERN) The live OpenAI-compatible endpoint. Drop-in base_url, about 8x cheaper than Together every call through the API ML-DSA-65 Live deployment $0.000029/response Connect
L2 smshPQ The post-quantum signed inference rail for LLM buyers. It signs every call inference call ML-DSA-65 Live $0.00018/receipt Connect
L3 AmpliHive A trust layer for the output side of any LLM. One call gets you an ML-DSA-65 certificate plus tenant details response + tenant + partner_id ML-DSA-65 Patent Pending $0.06/1M calls Connect
L3 HiveWidget Drop it in and it signs every LLM response. Five-stage pipeline, cuts tokens by 25 to 78% response payload ML-DSA-65 Live (npm + pip) metered Connect
L3 SiGR Delta A signed answer to what if: what inference would have produced under a different set of documents, rules, or identity counterfactual output HAHS-Δ + ML-DSA-65 Patent Pending metered Connect
L4 SiGR Signed inference Guarantee Receipt. One signature, four products, all under one roof.
+ QPuF+ Temporal+ HW-Sign
bill + bond + chain + consensus ML-DSA-65 Live free to verify, from $0.0002 to sign Connect
L4 SiGR-Bill Signs the bill, so you can rebuild the metered charge from the signed inputs token count + price ML-DSA-65 Live from $0.0002 / receipt Connect
L4 SiGR-Bond Signs the commitment: the SLA, the latency, and the model promise, before anyone pays SLA + latency + model ML-DSA-65 Live from $0.0002 / measurement Connect
L4 SiGR-Chain Signs the lineage: every link of a multi-step or multi-agent run. This is the flagship product. DAG of signed steps ML-DSA-65 Live from $0.0002 / run signed Connect
L4 SiGR-Consensus Signs the agreement: a model-panel route, captured as one receipt anyone can check votes + route ML-DSA-65 Live from $0.0002 / panel Connect
L4 NEXUS A universal receipt standard for AI decisions. Think of it as the SSL certificate for AI decisions, for any model any AI decision ML-DSA-65 + Ed25519 Open standard free / open Connect
L5 Capitolare Dual-DID signed receipts for every agent-to-agent trade. Think of it as the neutral ground for agents tenant_did + counterparty_did + price ML-DSA-65 Live per-trade Connect
L5 MANUKA Settlement token ($MNKA) for verified AI agent commerce verified A2A settlement ML-DSA-65 Live token Connect
L5 NanoPayments Sub-cent agent flows, with SHOD on every spend, HAHS receipts, and x402 spend + 6 gates Ed25519 + HAHS Live x402 Connect
L6 Colony Certified inference network planner network topology ML-DSA-65 Live platform Connect
L6 CITADEL The trust backbone for the defense supply chain. CMMC Level 2, 80K contractors, a November 2026 deadline SBOM attestation ML-DSA-65 PQ Live $0.00020/attestation Connect
L6 MERIDIAN A critical-infrastructure audit tool. NERC CIP-015, built to defend against $1.4M/day penalties SCADA command ML-DSA-65 Live platform Connect
L6 GENESIS Clinical-trial integrity. Every lab result signed to hold up until 2045, built for FDA 483 and ALCOA+ lab result ML-DSA-65 Live platform Connect
L6 NEXUS / Proof Architecture Open tools born at Hive: HAHS, SHOD, SpectralZK, and ViewKey open schemas ML-DSA-65 Open open Connect
How you connect

AFIR is the routing layer. It signs the inference as it happens. SiGR is the receipt that AFIR sends out. You do not hit SiGR directly. You route through AFIR and you get a SiGR back. Same stack, two layers.

Route through AFIR
Point your OpenAI-compatible base URL at AFIR. Every call comes back signed.
curl https://srotzin--afir-cern-afir-api.modal.run/v1/chat/completions \
  -H "Authorization: Bearer $HIVE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model":"hive/afir-cern","messages":[{"role":"user","content":"hello"}]}'
Sign with SideCar
Already have inference? Send the call to SideCar and get a SiGR receipt for it.
curl https://srotzin--afir-cern-afir-api.modal.run/v1/afir/sign \
  -H "Authorization: Bearer $HIVE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input":"...","output":"..."}'
What it costs: with signing vs. without
Status quo, unsigned: ~$0.000228 / response with no receipt, no record, and weeks to reconstruct when it goes wrong.
ProductPriceWhat you get
AFIR (Signed)$0.0003 / receiptNano volume floor $0.0001
AFIR-S$0.0002 / inf + $0.0004 / spanSelective attestation, O(1) signing
AFIR-PQ$0.0012 / receiptML-KEM-768 sealed, FIPS 203+204
AFIR-MAX$0.0018 / receiptoff-chain signed and offline verifiable; chain anchoring requires separate selection and specification, 6× faster, 82% cheaper on complex
AFIR-API (CERN)$0.000029 / responseLive drop-in, ~8× cheaper than Together
SiGR$0.00003 at scaleGraduated; pilot floor $2,500 / mo

Prices describe receipt services. Payment can use card or ACH, with optional USDC on Base where the order form permits it. A chain anchor is separate and must be named by the selected receipt profile.

The whole stack, on one page
The Hive signed inference stack: one post-quantum signing primitive expressed across six layers (input, routing, output, receipt, settlement, network), with HiveBound, AFIR, AmpliHive, SiGR, Capitolare and the full product lineup.

The shared primitive at the top; six layers of the inference stack below; the buyer journey at the bottom.

Choose a component to evaluate.

Start where the pain is loudest: the bill, the route, the response, or the agreement. Select the receipt profile that covers that workflow, then use its named verifier and trust key.