prepared privately for equinix · not indexed · not a customer, partner, or endorsement

Verify it on this page. Two clicks. No install.

Every check that ships in the offline kit also runs right here in your browser. Nothing leaves this page. If your network tab shows a single outbound call while the widget runs, we want to hear about it. Prompt. Proof. Provenance.

In-browser Offline after load Same engine as the kit Downloadable kit below

live verifier · runs entirely in this tab · no telemetry

Four checks. Push a button. Read the result.

This widget is the offline kit, unrolled into your browser. It builds a real signed receipt, verifies it, lets you tamper with a byte and watch the check fail, then re-verifies the published 5,000-frame benchmark from a fingerprint alone. The signing engine is bundled and served from this same domain.

Widget idle. Click 1 · Build & verify a sample to load the engine and run the first check.

Every click prints the recomputed hash next to the stored hash, one line per layer. If a byte was changed, that layer will read FAIL in the same output. There is no server round-trip.

live primitive stack · this button makes a real call to the hive api · not the offline widget above

The primitive stack. Run what exists now.

The widget above proves the offline kit in your browser with zero outbound calls. This one is different by design. It reaches the live Hive API and runs the public smoke route, so you see working primitives, not just an in-page reproduction. No account, no key, no payment, no telemetry beyond the single call you trigger.

14public runnable today
1x402-gated
3protected
1catalog-only

Fourteen surfaces run with no credentials. One more is x402-gated and answers with a real payment challenge. Three sit behind a bearer and tenant. One is catalog-only and unconfigured today. This widget exercises the nine public checks the smoke route covers. Not every primitive in the catalog is implemented; the catalog is the honest map of which is which.

Live API call This leaves your browser and hits inkframe.thehiveryiq.com. The offline verifier above never does.

Open the live primitive catalog
Idle. Click Run the live primitive stack to call the Hive public smoke route and print each check as it returns: inkframe.frame, cue_edge, prefill, replay, countersign, then carnac.sandbox, policy, verify, lifecycle_verify.
what the widget proves · four filings on file

Four small inventions. One receipt.

The four Filings under InkFrame v1 are on file with the USPTO. Both the in-page widget and the downloadable kit exercise the same four checks against a real signed receipt and a 5,000-frame benchmark manifest, using only public-safe code.

Filing A · Proof Pre-FillA ready receipt at the moment of decision. Nothing waits on us to render it.
Filing B · InkFrame Non-MutationA tamper-evident record. Change one byte and the check fails.
Filing C · Disclosure-Free ReplayThe proof route held without moving the data behind it.
Filing D · Arrival CountersignatureProof of the journey the receipt took, not just its origin.
prefer the command line? · the same checks ship as an offline kit

Same engine. Node 20+.

If your team prefers to verify from a shell on air-gapped infra, the zip below contains the exact same engine as the in-page widget. Eight files, three dependencies, four checks in one command. The kit hash is printed at the bottom of this page so you can compare it to what you downloaded.

# from any machine with Node 20+, offline is fine after npm install $ unzip hive-verifier-kit.zip $ cd hive-verifier-kit $ npm install # first run only, three dependencies $ node make-sample.mjs # builds a real signed receipt + replay manifest, offline $ node verify.mjs # runs all four checks in order
1
Verify a real signed receipt. Recompute every hash, then check both signatures against the published keys. Two minutes, offline.
2
Break it on purpose. Change one byte in the sample and watch verification fail. This is the non-mutation promise made testable on your own screen.
3
Re-verify our benchmark. Recompute the 5,000-frame manifest root and check its signature. The numbers become yours to confirm, not ours to claim.
4
Reconstruct a route with no payload. Rebuild exactly which cues sat where, from fingerprints alone. The direct answer to showing a route without moving the data.
keys and fingerprints · verify anything against the published keys

Public keys. Kit hash.

The signing and gateway public keys are baked into both the widget engine and the download and printed below so you can compare them to what your run reports. If they match, you are checking against the same keys the fabric map references.

Signer · Ed25519ab7ecdfc2bbc45263b12b91811c61cf2843c632eed0d0e1f3e3efa61cf9fb462
Gateway · Ed255196a41d7d394746adf937ae999591f50a979bb5a3c9a83163e45093db474113bdd
SignatureEd25519 + ML-DSA-65 · hybrid · NIST FIPS 204
CanonicalizationRFC 8785 JCS + SHA-256
Kit SHA-256e90ce8e717888ca613926676dec42cbf2f29c1482661eec3881d8190af255cd5
Kit size19,729 bytes · 8 files
the bigger picture · hive canon x equinix fabric

InkFrame v1 is one row. The whole canon lines up too.

The four Filings under InkFrame v1 are the fastest path in for Equinix, but Hive's canon is broader. We mapped every Hive primitive against every Equinix Fabric surface, with a column for what we help you do now and what we help you take on next.

why this page exists · hosted here, not somewhere else

Everything lives on our own domain. Nothing routes through a third party.

The widget, the engine bundle, the download, and the download path all sit on thehiveryiq.com. There is no interstitial, no shortener, no third-party host in the chain. If you fingerprint the download, you get the SHA-256 above. If you open your browser's network tab while the widget runs, you get zero external calls after the initial page load. That is the point.