HiveForce installs in five minutes
One custom object. Two triggers. One Lightning Web Component. Then every Opportunity, Case, and Contract carries signed agent receipts your auditors can verify without calling us.
01What gets installed
| Hive_Receipt__c | Custom object. 19 fields total — 13 core (agent_id, counterparty_did, action_ref, action_type, scope, payload_hash, signature, timestamp_ms, verification_status, verified_at, jurisdiction, direction, skip_verification) plus 6 settlement fields used by the Nano rail (settlement_tx_hash, settlement_amount_micro, settlement_chain, settlement_token, settlement_block, settled_at). Lives on Opportunity, Case, and Contract. |
| Hive_Subscription__c | Custom object. 9 fields. Tracks org_did, plan, billing_rail, per_receipt_usd, monthly_cap_usd, free_receipts_remaining, receipts_this_period, period_start, period_end. Used by the Standard rail billing meter. |
| Hive_Config__c | Custom object. Holds the Hive treasury public key. One record per org. Public key value: fd9d10abe60de7510c61ef649c8da598a519468dd2a2b827106d76487a899444 |
| HiveReceiptInsertTrigger | Before-insert trigger on Hive_Receipt__c. Calls HiveReceiptVerifier; fail-closed — invalid receipts cannot land. |
| HiveReceiptAfterInsertTrigger | After-insert trigger on Hive_Receipt__c. Increments the billing meter for Standard-rail receipts. |
| HiveReceiptVerifier (APEX) | Verifies inbound Ed25519 signatures against the canonicalized (RFC 8785 JCS) receipt body. Pure APEX — no callouts at verify time. |
| HiveReceiptMinter (APEX) | Apex-callable. Signs an outbound receipt against the Hive backend and writes it to Hive_Receipt__c. |
| HiveNanoSettle (APEX) | Apex-callable. Attaches a Base-network USDC settlement to a receipt. Same action_ref binds the receipt to the on-chain tx. |
| HiveBillingMeter (APEX) | Standard-rail meter. Increments Receipts_This_Period__c, enforces the $499 monthly cap, decrements free tier. |
| hiveA2AInbox (LWC) | Lightning Web Component. Shows receipts on Opportunity, Case, and Contract page layouts. Renders verification status, settlement status, and a one-click link to verify the JSONL line independently. |
| HiveForce_Admin (permission set) | Grants read/write on Hive_Receipt__c, Hive_Subscription__c, and Hive_Config__c. |
02Install steps
A Salesforce admin with sandbox or scratch-org rights can complete this in five minutes. No partner involvement required.
STEP 1Authorize a sandbox or scratch org
sf org login web --alias hiveforce-sandbox
STEP 2Deploy the metadata
sf project deploy start --target-org hiveforce-sandbox
Deploys the three custom objects, both triggers, the four APEX classes, the LWC, and the permission set.
STEP 3Load the Hive public key
sf data create record --sobject Hive_Config__c \ --values "Name='hive-prod' Public_Key__c='fd9d10abe60de7510c61ef649c8da598a519468dd2a2b827106d76487a899444'" \ --target-org hiveforce-sandbox
STEP 4Assign the permission set
sf org assign permset --name HiveForce_Admin --target-org hiveforce-sandbox
STEP 5Add the inbox to your page layouts
Setup → Object Manager → Opportunity / Case / Contract → Page Layouts → drag "Hive A2A Inbox" into the layout. Save. Refresh any record. Receipts appear inline within seconds of a mint.
03What gets signed
Every receipt is a small JSON envelope. Signature is Ed25519 over the canonical (RFC 8785 JCS) bytes. Anyone with the Hive public key can verify any receipt from a JSONL line alone — no Salesforce login, no Hive infrastructure required.
{
"version": "1.0",
"agent_id": "did:hive:<treasury>",
"counterparty_did": "did:hive:<other-org>",
"action_ref": "sha256(agent_id || action_type || scope || timestamp_ms)",
"action_type": "opportunity.close.intent",
"scope": "salesforce:opportunity:006XXXXXXXXXXXXXXX",
"payload_hash": "sha256(canonical_jcs(payload))",
"timestamp_ms": 1747883400000,
"jurisdiction": "US-CA"
}
04The two rails
| Standard | Nano | |
|---|---|---|
| Signed receipt | yes | yes |
| On-chain settlement | no | yes (Base USDC) |
| Pricing | $0.50/receipt, 100/mo free, $499/mo cap | sub-cent per call on-chain |
| Billed by | Hive (Square invoice or monthly ACH — buyer picks) | wallet-to-wallet, no invoice |
| Verifier path | local Ed25519 (APEX) | local Ed25519 + on-chain tx hash |
| Use case | audit, compliance, attestation | per-call agent billing, A2A commerce |
| AppExchange listable | yes | yes |
05Hive backend endpoints used
POST https://hivemorph.onrender.com/v1/receipts/mint— signs an outbound receipt and returns the signed envelope.POST https://hivemorph.onrender.com/v1/receipts/verify— independent verify (optional — the APEX class verifies locally and never needs to call out).GET https://hivemorph.onrender.com/v1/treasury/pubkey— fetches the current Hive treasury public key (only used during initial install or key rotation).
Verify-side traffic is zero by default. The Hive public key is loaded once into Hive_Config__c and used by HiveReceiptVerifier for every inbound receipt check. Hive cannot see your records.
06Why this and not Agentforce alone
| Capability | Agentforce | HiveForce |
|---|---|---|
| Inside-org agent workflows | yes | n/a (use Agentforce) |
| Cross-org agent receipts | no | yes |
| Tamper-evident audit trail | no | yes |
| Counterparty verifiability | no | yes |
| AppExchange listable | n/a | yes |
| Regulator-pullable from Salesforce alone | no | yes |
07Status
Public starter. Production deployments pin to a tagged release and rotate the Hive public key per org policy. MIT licensed. Compatible with any Salesforce edition that supports custom objects and APEX triggers (Enterprise, Unlimited, Developer, scratch orgs).