private architecture proposal · prepared for OKX · not a customer, partner, pilot, or endorsement · not indexed
the proof layer for the agent marketplace

Your agents will build reputation onchain.
Who signs for it?

If the inputs are self-reported outcomes, the reputation is an affidavit the agent wrote about itself. Hive signs the decision instead. It records which model acted, which policy floor it cleared, and whether it was released or held. A counterparty or an examiner can check that offline, without ever touching your systems and without ever seeing your data.

OKX AIagents discover work, transact, build reputation onchain
Exchange OSinstitutions deploy markets on your stack
ICE joint venturebenchmark-priced futures · institutional counterparties
OKX Pay · EU licencepayments under a European regulator's eye
the demonstration · flip the switch yourself

A marketplace where agents grade themselves
is a marketplace of affidavits.

Five agents. Reputation assembled from what each one reported about its own work. Everyone looks excellent, because they always do. Now switch on independent receipts and watch which scores survive.

agent reputation · illustrative marketplacemode · self-reported
agentself-
reported
independently
verified
independent receipts · OFF
every agent reports its own results · nobody can check any of it · the leaderboard is a list of claims
Reputation the agent cannot write about itself.
That is the only kind a counterparty can price.
the dispute · two clocks, same question

"Prove what your agent did on March 14."
One answer takes weeks. One takes a query.

This is the question that eventually arrives in writing, from a counterparty, a licensing authority, or opposing counsel. Today it starts a forensic reconstruction across logs nobody outside the company can validate. With receipts, it is a lookup, and the answer verifies without you in the room.

Forensic reconstruction

0
days elapsed · still assembling
pull logs · correlate systems · draft narrative
and the record is still one you wrote about yourself

Signed query

0.0s
answered · verified offline
one bundle · chained receipts · a gap is provable
the reviewer checks it without your systems
surface → proof · pick one

One receipt layer, every surface you shipped

Nothing here touches custody, keys, matching, or settlement. The receipt sits above the action, proving the decision that caused it.

what cannot be proven today
what the receipt adds
who asks for it
the boundary · move the sliders

It sizes the proof a decision deserves.
It does not judge your business.

Hive forms no opinion about your markets, your users, or your risk appetite. It sizes how much proof a decision needs, records provenance, and signs it. You set the floor. Policy can only get stricter, never looser.

ROUTINE
The weighting is private. How Carnac™ sizes proof is a trade secret and never leaves Hive. What ships to you is the route it chose and a receipt anyone can re-check offline. Two planes, kept apart on purpose. That separation is what makes the proof worth anything to a regulator.
the carnac™ family · on surfaces you already shipped · click each one

You built the agent surfaces.
Carnac™ proves what the agent decided on them.

OKX ships an AI agent marketplace, an Exchange OS that institutions build on, and OKX Pay under a European licence. Each one lets a model reach toward value. The Carnac™ family turns each reach into a signed record before anything moves.

carnac live ink™ · press replay

Your compliance team writes the rule.
The proof forms in the text, live.

When an ops or compliance owner writes an agent policy, each part is marked in the moment it is written, and each part carries the route it earns. The record is built while the work happens, not rebuilt afterward.

routine review hold
● the detailed map · skim or skip · pick a primitive

Which primitive proves which surface

Under the Carnac™ family sits a set of signing primitives, each with one job. All are available today. Connecting them to OKX would be a scoped build inside your existing surfaces. A developer can prove one connection in under an hour. One protected workflow takes one to three engineering days. A production pilot takes one to two weeks, because security review and change control still matter.

available capability
how OKX can use it
platform value

A record you keep about yourself
is a document written by the defendant.

The first step is small. Point one agent decision at the protected route and see what comes back. No integration, no custody change, no access to your data. The proof verifies offline today, on a post-quantum standard, by anyone you hand it to.

layer · above the action, never competing standard · ML-DSA-65 · FIPS 204 verification · free · offline · forever
Private architecture proposal prepared for OKX · noindex / nofollow / noarchive · this page does not state or imply that OKX is a customer, partner, pilot, or endorser · the agents, scores, disputes, and routing shown are illustrations of how the flow works and are not OKX data · Hive proves what an AI decided; it does not replace custody, matching, settlement, or the systems that secure them, and stating that a policy check ran and was signed is not a statement of legal or regulatory compliance · we prove conditions, never the answer for you · we never read prompt content, and every request is receipted by a one-way SHA-256 fingerprint, not the words · verification is always free and works offline against the Hive public key · Carnac™, CarnacPrompt™, Carnac Gateway™, and Carnac Live Ink™ are Hive marks · all Hive primitives patent pending · company facts referenced are public and source-reported as of July 2026 (OKX AI agent marketplace; Exchange OS; joint venture with Intercontinental Exchange; OKX Pay and European Payment Institution licence) and should be re-verified before external use · prepared by Steve Rotzin, Founder, Hive Civilization Inc. · Wyoming, USA
new in the canon · runnable on this page

Give each agent action an authority check

This receipt adds a narrow test of the authority presented for one exchange side agent action, whether it reaches toward a trade or a withdrawal. It is live on the production rail and the run below verifies a real signed receipt.

mandate.conformance · Deployed in production

Check a trade or withdrawal against its stated authority

When an agent places a trade or requests a withdrawal, this receipt compares that one action with the delegated authority supplied for it. It tests the declared amount, currency, timing, and scope against constraints in an authority receipt signed before the action was authorized. The outcome is recomputed by the service, rather than accepted from the exchange side agent. That gives compliance, risk, and market operations a reviewable statement about the action that was presented. It adds evidence above custody, matching, and settlement without changing any of those systems.

What it does not do. It does not prove that a cardholder granted the delegation, that the stated agent identity is genuine, that a network authorized or settled the action, that value was delivered, or that a person read the terms shown. It is not payment authorization and provides no cardholder credential; no card network, issuer, or regulator currently recognises it as authentication data, compelling evidence, or a liability shift; it cannot deny or resolve disputes, limit rights under Regulation E, Regulation Z, or an equivalent rule, test aggregate limits or velocity, or show that the supplied authority was unrevoked at authorization time.

POST /verify/mandate-conformance · case pass, a clean record

Nothing has run yet. Click Run it and the answer below comes back from the verifier, not from this page.

POST /verify/mandate-conformance · case fail, a forged record

Nothing has run yet. Click Run it and the answer below comes back from the verifier, not from this page.

Every run above posts a verified request body from this domain to the open verify route and prints what came back. The example receipts are signed with published example keys, so verify reports key_trust example_registry. That is on purpose. Nothing on this page is a production issuance, a customer record, or an endorsement. Patent Pending.