Hive is the receipt layer for Agentforce.
Every action your Agentforce coworker takes gets a signed, verifiable receipt that lives on the Salesforce record it touched. Audit-ready by default. Cross-org by default. No callout. No vendor lock.
01What you get
- One Salesforce custom object —
Hive_Receipt__c— lands on Opportunity, Case, Order, Contract, Claim, or any record you tie it to. - Two triggers — one signs the action before insert, one verifies it after insert and rolls back anything that does not pass.
- Pure-Apex verifier — no callout at verify time. Survives Hive disappearing.
- Lightning component — the inbox where every receipt for a record is visible to the user, the auditor, and the counterparty.
- Public verifier in any browser — thehiveryiq.com/verify — anyone with the receipt body can check the signature without contacting Hive or you.
02Why Agentforce needs it
Agentforce gives the enterprise an AI coworker. The piece Agentforce does not ship with is the record that coworker leaves behind — the kind of record a regulator, a counterparty, or a court can verify without picking up the phone.
Three things stay broken without it: the audit story when someone asks what the agent did at 2:14pm; the cross-org handoff when two companies' agents need to trust each other; and the pay-for-action layer when an agent buys data, compute, or another agent's output.
Hive ships all three on top of Agentforce. Five-minute install. Same record. Same Salesforce UI.
03Two rails, one object
04Nine use cases shipped on day one
- AmLaw firm — closing-an-Opportunity narrative the partner approved, signed
- SaaS company — inline upsell with sub-cent settlement so the agent does not lose money paying for itself
- Hospital — signed prior-auth handoff between the requester's agent and the payer's agent
- Manufacturer — carrier's agent signs that an order line shipped
- Insurer — claim-deny rationale a regulator can verify without contacting the carrier
- Media platform — impression-batch settlement at machine speed
- Public sector — cross-agency milestone certification
- Marketplace — agent-invokes-agent with an 80/20 split locked at the contract
- Bank treasury — correspondent bank refuses to release a wire unless an agent attestation lives on the originating Opportunity
All nine, with Apex, Flow XML, signed-receipt JSON, and a curl proof per case →
05Built for Salesforce Security Review
- RFC 8785 JCS canonicalization — pure Apex, byte-for-byte against the RFC vectors
- Ed25519 (RFC 8032) signature — pure Apex verifier with the public key as a constant
- Fail-closed trigger — any unverifiable receipt rolls back the insert
- Zero PII required by the package; CRUD/FLS enforced via
stripInaccessible;with sharingeverywhere - No remote scripts in the LWC, CSP-clean
- Two named credentials, customer-controlled, revocable in one click
Full Security Review answers ship with the AppExchange listing kit. Public install detail: thehiveryiq.com/salesforce/install
Try it in an afternoon.
Five minutes to install. Five minutes to fire your first signed action. Five minutes to verify it in a browser. The rest of the afternoon is whatever you want to attach it to.