You already run your own model on your own stack. AFiR didn't route it, and that's fine. Hand us the input and output and we seal and dual-sign it with ML-DSA-65 (NIST FIPS 204) + Ed25519, then hand back a receipt anyone can verify. Zero routing. Zero model change. The output becomes signed inference.
No rebuild, no migration. The sidecar sits beside whatever you already ship and signs the inference after the fact.
OpenAI, Anthropic, a local model, anything. AFiR never touches your routing or your weights.
Send {input, output} to the sidecar. We seal it and dual-sign in tens of milliseconds.
A merkle root, an ML-DSA-65 + Ed25519 signature, and a verify URL. Verify offline or by link.
This demo signs with Hive’s key so you can try it with no signup. Bringing your own key, the actual SideCar, is the paid feature below.
// Run the demo to see a live ML-DSA-65 + Ed25519 receipt.
A SideCar receipt signs the input and output supplied by your integration. A valid signature from a trusted issuer makes that statement tamper-evident; it does not prove which model executed. Signing is off-chain, and the USDC payment record on Base is separate. Any anchor requires a receipt-to-root proof, a root-to-transaction binding, successful block inclusion and a stated finality policy.
The demo above uses Hive’s key. Signing under your key, so the receipt proves you signed it, is the SideCar.