Hive Key, Orb, and Blade are tamper-evident signing devices that bind every receipt to a piece of hardware you can hold. Dual-signed with classical and post-quantum cryptography. Anchored on Base. Audit-ready the moment the action happens.
A receipt is only as trustworthy as the place its private key lives. When a key sits in software, anything with code execution on the same machine can copy it, sign in your name, and walk away. When the key never leaves a tamper-evident secure element, the signature is bound to a specific piece of hardware in a specific physical location — and that binding survives forensic review.
Hive hardware moves the signing operation off the application processor entirely. The receipt is canonicalized, hashed, and signed inside a dedicated security domain. Every Hive receipt carries two signatures — one classical, one post-quantum — and a hardware attestation that proves which device produced it.
The same dual-signature receipt format works whether the device sits on a keychain, a desk, or a server rack. The form factor is sized to the throughput you need.
A pocket-sized signer for individuals and one-person agents. Plugs into a phone or laptop. Issues hardware-rooted receipts for personal AI use, e-signing, and identity proofs.
A desktop hub for small firms — a few attorneys, a clinic, a regional brokerage. Sits on a desk, signs for the whole team, optional biometric step-up for high-value actions.
A 1U rack appliance for firms and platforms signing at scale. Drops into an existing data closet, signs for thousands of users and agents, exposes the same MCP signing API as the smaller units.
The private keys never leave a dedicated security domain. Attempts to extract or tamper with the device produce verifiable evidence that downstream verifiers can detect.
Every receipt carries a classical Ed25519 signature for compatibility with existing verifiers and a post-quantum ML-DSA-65 signature so receipts stay valid after a quantum break. Both must verify.
JCS (RFC 8785) gives every receipt one and only one byte representation. Two implementations on two operating systems hash the same JSON to the same 32-byte digest. No ambiguity, no replay-by-reformatting.
Receipts are Merkle-batched and the root is written to a public chain. Any auditor can reconstruct the chain of custody from the public record without trusting Hive.
Hive Key, Orb, and Blade are three form factors of one product family: the Comb. A Comb is a hardware-anchored unit where credentialed agents park and sign. The same biology runs all the way down — bees (agents) build the Comb, and the Comb is where they store the work that has to survive.
Two or more Hive devices pair into a single Comb — a self-governing signing unit with its own quorum rules. A Comb can be a closing attorney plus paralegal, a clinician plus nurse, or a procurement officer plus finance. Each Comb carries a MoltingPolicy™ that controls who signs what.
Combs federate into the Hive — the collection of Combs that makes up a firm. A firm of fifty attorneys runs as one Hive of ten Combs. Every action issues a single Hive Receipt: a Merkle root over the underlying Comb-level receipts, dual-signed by the elected leader Comb. One on-chain anchor settles the whole organization's day.
When network connectivity is unavailable, Combs keep signing and stage Merkle batches for deferred anchoring once a link returns. Field-deployable. Audit-survivable.
Legal term of art: in the filed provisional, a Comb is described as a Hive Cell and the Hive as a Hive Battalion. Same structure, public name updated.
Every redline, every signed engagement letter, every closing document — bound to a Cell of partner + paralegal silicon. Reconstruct any deal lifecycle from on-chain roots.
Clinician-signed receipts on prior auths, claims, and PHI-touching automation. Survives both HIPAA audit and a 20-year quantum threat horizon.
Hardware-rooted evidence for EU AI Act, SOC 2, and US state AI laws. Every model call carries a Hive receipt; every receipt carries a hardware attestation.
Closing rooms running as a Hive Cell — title officer + buyer + lender silicon. One Battalion Receipt anchors the entire transaction.
Pilot slots are reserved for firms that already sign at volume — AI governance customers, regulated-industry teams, and platforms running multi-agent workloads in production. Drop your address; we'll reach out with the partner program brief.