HiveForce
Cross-org agent receipts as a first-class Salesforce object. Standard signed receipts. Nano on-chain settlement. Drop-in for Opportunity, Case, and Contract.
Standard Agents
Signed Ed25519 receipts. No money moves. For audit-grade cross-org agent calls where value flows through existing contracts, invoices, or internal processes.
- Ed25519 + RFC 8785 JCS canonicalization
- SHA-256 action_ref binding
- Fail-closed verifier trigger
- Lands as Hive_Receipt__c in both orgs
- Verifiable from JSONL, no callout
- HIPAA / SOC-2 / EU-AI-Act audit shape
- Billed by Hive · $0.50 per receipt · 100/mo free · $499/mo cap
Nano Agents
Same signed receipt, plus a sub-cent USDC settlement on Base bound to the same action_ref. Every cross-org agent call settles inline, in the same APEX transaction.
- Everything in Standard, plus —
- Base mainnet USDC transfer per call
- Sub-cent (micro-USDC) settlement
- tx_hash bound to receipt action_ref
- Settlement_Tx_Hash__c populated
- Per-call agent billing, settled on-chain
Two rails. Two ways to get paid.
Standard Rail
$0.50 per signed receipt
- First 100 receipts/month free
- Monthly cap $499 — high-volume orgs stop accruing
- Billing rail: Square invoice or Hive monthly ACH (customer picks at signup)
- Metered by HiveBillingMeter.cls + Hive_Subscription__c
Nano Rail
On-chain per call (sub-cent)
- USDC on Base mainnet, settled in the same APEX transaction
- No invoice, no Stripe — wallet-to-wallet
- Hive takes 0% on Nano settlements (customer pays gas only)
- Receipt + tx_hash bound to same action_ref
No setup fee. No platform fee. Cancel monthly. AppExchange managed package + open MIT starter.
Eight things HiveForce does that Agentforce alone cannot
Agentforce runs inside one org. HiveForce makes the agent’s action provable to a second org — an auditor, a counterparty, a regulator, or another company’s agent. Every case below is a single APEX call or Flow step. Each mints a real Hive_Receipt__c. Pick the rail by whether money needs to move.
AmLaw firm signs an Opportunity close intent before the wire
Outside counsel’s Salesforce org closes an Opportunity tied to a $14M settlement. Before treasury releases the wire, the Opportunity-close action is signed and replicated to the client’s org as Hive_Receipt__c. If the receipt fails verification, the wire is blocked by the After-Insert trigger.
Vendor agent prices an upsell, buyer agent pays inline
A vendor’s Agentforce agent on Opportunity proposes a SKU change. The buyer’s Agentforce agent accepts. HiveNanoSettle moves micro-USDC on Base in the same APEX transaction; Settlement_Tx_Hash__c is written before commit. No invoice, no Stripe.
Provider agent hands a prior-auth Case to a payer agent
Provider org’s Case escalation fires case.escalation.handoff. The receipt encodes PHI minimization scope and HIPAA jurisdiction. The payer’s org receives a verified inbound receipt linked to its own Case; the Hive A2A Inbox renders the chain on the Case Lightning page.
Supplier agent ships a PO line, settlement releases at scan
Supplier’s Order line is closed when a 3PL scan event is received. The Salesforce Flow calls HiveNanoSettle.settle with the agreed unit price in micro-USDC. The buyer’s org sees an inbound receipt + on-chain tx hash; AP reconciles against the receipt, not an invoice.
Adjuster agent declines coverage with a defensible action_ref
Carrier’s adjuster agent updates a Case status to Closed Without Pay. The receipt includes the policy id, loss date, and the agent’s credential pill. The insured’s counsel can pull the receipt from JSONL and verify offline — no Salesforce login, no callout.
DSP agent pays a publisher agent per verified impression batch
DSP’s Salesforce-fronted agent settles a batch of 10,000 verified impressions in one Nano call. action_ref binds the batch hash to the on-chain tx. The publisher’s org sees the receipt on its Account record, with Settlement_Amount_Micro__c matching the contract CPM.
Agency contract officer signs a milestone acceptance
A US-CA contracting officer’s agent signs contract.milestone.accept on a Contract record. The vendor org sees the inbound receipt and is now eligible to invoice. The receipt is portable to FOIA and to the OIG — verifiable without Salesforce access.
Two third-party agents transact on a Hive marketplace SKU
An Agentforce agent on the buyer’s org calls a Hive Bazaar agent (e.g. TaxSorter). Nano settles the per-call price; both parties’ orgs get matching Hive_Receipt__c rows with the same action_ref. Publisher receives 80% on-chain, Hive 20%, all in one tx.
Each card links to a deep page with the APEX call, the Flow XML, the resulting receipt JSON, and a curl verification command. See all use cases → · Build your own in the HiveForce Factory.
Mint, sign, settle
After installing the starter package and loading the Hive public key, mint a Standard receipt or a Nano receipt with one CLI call.
Both land in Hive_Receipt__c on the target record.
Open the Opportunity, Case, or Contract page — the Hive A2A Inbox component shows the receipt within seconds.
# Install sf project deploy start --target-org hiveforce-sandbox # Standard receipt — audit only ./scripts/mint-receipt.sh \ --org hiveforce-sandbox \ --counterparty did:hive:0xCounterparty \ --action_type opportunity.close.intent \ --record-id 006XXXXXXXXXXXXXXX # Nano receipt — signed + settled on Base ./scripts/mint-receipt.sh \ --org hiveforce-sandbox \ --counterparty did:hive:0xCounterparty \ --counterparty-wallet 0xCounterpartyBaseWallet \ --action_type case.escalation.handoff \ --record-id 500XXXXXXXXXXXXXXX \ --nano 5000 # 5000 micro-USDC = 0.005 USDC
The Standard receipt shows Verification_Status__c = VERIFIED.
The Nano receipt shows the same, plus Settlement_Tx_Hash__c linked to BaseScan.
Hive_Receipt__c · 19 fields
One custom object. Standard receipts populate the first 13 fields. Nano receipts populate all 19. The Hive A2A Inbox component renders either mode automatically.
| Field | Type | Notes |
|---|---|---|
| Agent_Id__c | Text(255) | Signing agent DID |
| Counterparty_Did__c | Text(255) | Recipient DID |
| Action_Ref__c | Text(128) | SHA-256 of preimage |
| Action_Type__c | Text(128) | e.g. opportunity.close.intent |
| Scope__c | Text(255) | salesforce:object:id |
| Payload_Hash__c | Text(128) | JCS-canonicalized payload |
| Signature__c | LongText | Ed25519 hex |
| Timestamp_Ms__c | Number(18,0) | Unix epoch ms |
| Jurisdiction__c | Text(16) | e.g. US-CA, EU-IE |
| Direction__c | Picklist | INBOUND · OUTBOUND |
| Verification_Status__c | Picklist | VERIFIED · FAILED · SKIPPED_ADMIN |
| Verified_At__c | DateTime | When trigger ran |
| Skip_Verification__c | Checkbox | Admin-only override |
| Settlement_Tx_Hash__c | Text(80) | Base tx hash |
| Settlement_Block__c | Number(18,0) | Block number |
| Settlement_Amount_Micro__c | Number(18,0) | micro-USDC |
| Settlement_Chain__c | Text(40) | base-mainnet |
| Settlement_Token__c | Text(16) | USDC, EURC, … |
| Settled_At__c | DateTime | When settlement landed |
Drop it in your sandbox before your next cross-org agent signs anything.
MIT. Public. APEX + LWC + trigger + Flow actions. Five minutes to install, one CLI call to mint, one Lightning page to verify.