Worked example — model-call route receipt

SmartAgent receipted a live Mistral Leanstral route.

A Hive SmartAgent chose Mistral Leanstral 1.5, called it, and captured the whole model-call route as one signed receipt: the provider and model it used, a hash of the prompt, a hash of the response, the per-phase timing, and an Ed25519 signature. The receipt then verified against the issuer key. This is the actual result of a live run on the backend — not a mock.

Read this first — what this proves

This proves model-call route receipting: the provider and model, the prompt hash, the response hash, the timing, the signature, and the verification. It does not claim the Lean proof compiled, and no Lean compiler or LSP was invoked. The model returned a proof skeleton (a statement with a sorry placeholder) — that is model output, receipted as such, nothing more.

— The flow

Route is a decision. Proof is a receipt.

1 · Select

SmartAgent selects the mistral / leanstral-1-5 route for a proof-engineering prompt.

2 · Call

The provider is called live. Round-trip latency is measured, not estimated.

3 · Hash

Prompt and response are SHA-256 hashed — the receipt binds content by hash.

4 · Sign

The run metadata is canonicalized and Ed25519-signed into one receipt.

5 · Verify

The receipt verifies against did:hive:hivemorph — ok.

— Live run

Fetch the current runlive

This widget calls the live backend and renders the latest run. If the fetch fails, the last-known verified values below still stand on their own.

GET /v1/model-receipts/leanstral-demo

Idle — auto-loading the live run…

Status: pending
Provider · model: —
Run ID: —
Receipt ID: —
Verification: pending
Algorithm · issuer: —
Prompt SHA-256: —
Response SHA-256: —
Payload SHA-256: —
Tokens (p / c / total): —
Timing (ms): —
Backend commit: —

Response preview (model output — not a compiled proof)

—

Provider diagnostics

— Last known verified run

Static reference valuesrecorded 2026-07-04

These are the exact values from a successful live run, kept here so the page is meaningful even if the live fetch above is unavailable.

Status: ok · true
Provider · model: mistral · labs-leanstral-1-5 (Mistral Leanstral 1.5)
Run ID: mr_1783189173_ce79d9339a79
Receipt ID: r_model.receipt.leanstral-1-5_1783189173_ba21720e5403
Verification: verified · ok against did:hive:hivemorph
Algorithm: Ed25519 · verify endpoint /v1/receipt/verify
Prompt hash: ff11617efb0ffc3c51bf292ca701cef6bf0658104cbe5b55d28fb59ef8d6ad4f (response SHA-256)
Payload SHA-256: 5d2f548d0ec42013dccf29d2e059c95125132390d48db506b8a1d43ef6671640
Tokens: prompt 90 · completion 45 · total 135
Timing (ms): provider_call 708.51 · canonicalize 0.034 · hash 0.004 · sign 0.114 · verify 0.136 · total 708.80
Backend commit: afb99469edca

Response preview (model output — not a compiled proof)

```lean4 -- Skeleton: proof of Nat.add_comm not yet implemented theorem add_comm (n m : Nat) : n + m = m + n := by sorry ```

— SmartMorphAgent

No economic state changed, so SmartMorphAgent stayed off.

Not triggered this run

SmartAgent ran; SmartMorphAgent did not.

This run receipted a model call only. No economic state transition occurred — no x402 quote was accepted, no USDC settled, no balance moved — so SmartMorphAgent remained off. If a future run settles a payment, that settlement becomes its own receipted event, and SmartMorphAgent can act on the new economic state. One route, one receipt today; the payment receipt is a separate artifact when it happens.

— Proves / does not prove

Does not claim

That the Lean proof compiled
That a theorem was checked or verified
That any Lean compiler or LSP ran
That the model output is correct

Does prove

Which provider and model the agent used
The exact prompt and response (by SHA-256)
The measured per-phase timing of the call
An Ed25519 signature that verifies against the issuer

— Reproduce it

Run the same call yourself

curl https://hivemorph.onrender.com/v1/model-receipts/leanstral-demo

Returns the signed receipt, verification result, per-phase timing, response preview, and the prompt/response hashes. A missing provider key returns a signed preflight receipt (HTTP 200), not an error.

Model facts: Mistral Leanstral 1.5 — mistral.ai announcement and the model card on Hugging Face.

Values shown under “Last known verified run” were recorded from a live backend run on 2026-07-04. The live widget calls hivemorph.onrender.com directly and reflects current state; results may vary between runs. This example receipts a model-call route only — it makes no claim about the correctness of the model’s output, does not assert that any Lean proof compiled, and invokes no Lean compiler or LSP.