Carnac™ Control Plane · Before inference
Commit the prompt, before the model runs.
CarnacPrompt™ takes the fully assembled prompt window, the system prompt, retrieved context, tools, and user input, and commits a signed hash of it before the model runs. When a decision is later questioned, you can prove exactly what the model was asked.
What it does
CarnacPrompt™ sits in front of your model call. Right before the model runs, it hashes the assembled prompt window and writes a signed receipt of that hash. The plaintext prompt stays in your systems. Hive receives the hash, not your data. Later, anyone with the receipt can confirm the prompt has not changed.
Who uses it
Teams running regulated or high-stakes inference: model labs, inference platforms, and enterprises that must answer "what exactly did the model see" during an audit or dispute.
Where it sits
Between prompt assembly and the model call, inside your environment. It is the first gate of the Carnac™ control plane, before Carnac™ reads consequence and before any effect commits.
What is live now
- Live now. The cryptographic receipt path: hash the prompt window, sign it (ML-DSA-65), and verify it offline.
- Customer integration required. Wiring CarnacPrompt into your prompt-assembly step and mapping which fields are hashed versus kept private.
Data flow
Your prompt is hashed on your side. Only the hash and metadata leave your boundary. Hive never receives the plaintext prompt. Receipts verify offline without calling Hive.
# Illustrative shape of a prompt-commit request
POST /v1/carnacprompt/commit
{
"prompt_window_hash": "sha256:...", # you compute this locally
"model": "your-model-id",
"context_refs": ["doc:...","tool:..."]
}
# Response: a signed receipt you can verify offline
Endpoint shape shown for illustration. Confirm the current method and schema in the Developers docs before integrating.
Canon primitives underneath
| Canon primitive | What it proves here | Status |
|---|---|---|
| CarnacPrompt™ | Signs the committed prompt-window hash before the model runs. | Live core |
| SiGR | Signs the decision (model, inputs, outcome) into one receipt. | Live core |
| Imprimatur | Anchors receipts so they verify offline over time. | Live core |