CNS — Compliance-Native Settlement — Build #39

Settlement that
audits itself.

The first rail where the receipt and the transfer are the same object. 11.71 ms median, post-quantum signed, 4 compliance controls audited per message.

11.71 ms median wall-clock 15.86 ms p99 12 frameworks 158 controls Ed25519 + ML-DSA-65 4 controls / message
11.71 Median ms (off-chain)
15.22 p95 ms
15.86 p99 ms
12.35 Off-chain mean ms
Live endpoint active
All transfer-time numbers are off-chain. On-chain Base L2 anchoring is pending (Build #39 — anchor wiring in progress). The off-chain envelope is fully signed and verifiable today.

The only metric that matters for compliant flows

Rail comparison: speed with compliance proof attached

Raw finality was won years ago. The question for regulated flows is which rail delivers finality with cryptographically signed compliance proof attached. No other rail does this.

Rail Finality Cost / tx Compliance attached Provenance Post-quantum Jurisdiction-aware Per-message audit
SWIFT MT103 T+1 to T+3 $40+ None (perimeter) None No Manual Manual, days
XRP / Ripple 3–5 sec ~$0.0002 None None No No None
Solana ~400 ms ~$0.00025 None None No No None
Stellar 3–5 sec ~$0.00001 None (perimeter) None No Memo only None
Base L2 (raw) ~2 sec ~$0.0001 None None No No None
Hive CNS 11.71 ms off-chain
+ Base L2 anchor (pending)
$0.0001–$0.0768 receipt Per-message bundle (4 controls) MAPET-X 24-axis Yes (ML-DSA-65) Yes (per-control) 6.5 ms / 158-control fleet 460 ms
The Hive CNS position: We do not beat XRP on raw finality. We beat every other rail on speed-to-finality with compliance proof attached, because no other rail attaches the proof to the message.

How it works

Single request, dual-signed, compliance-bundled envelope

From submission to settled receipt: one request, 4 compliance controls audited in parallel, SHA3-256 hashed, dual-signed with Ed25519 and ML-DSA-65, and Sphere-tiered. The full pipeline in milliseconds, not days.

Off-chain timing: The median wall-clock of 11.71 ms covers steps 1–7 (validate → audit → dual-sign → Sphere). Base L2 anchor (step 8) adds ~2 sec when wired. The signed envelope is verifiable without waiting for on-chain confirmation.

Real settled transfer

One live envelope, every field

A real settled transfer with its full compliance bundle. Four compliance controls audited, all passed, dual-signed, Sphere-tiered, verifier URL attached. This is not a mock.

Settled
transfer_id: cns_49bb822f53c94e7a94ca9896d609aca2
submitted_at: 2026-05-09T05:35:00Z  ·  settled_at: 2026-05-09T05:35:00Z
11.73
wall-clock ms (off-chain)
Transfer details
did:hive:treasury:0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E
did:hive:counterparty:0xabc123
USDC  ·  base-8453
$250,000.00 USDC
trade-settlement
[ "US", "SG" ]
Compliance bundle — 4 controls audited
controls_audited: 4 All passed score: 75.0
CC6.2 ✓ Pass
KYC / AML — identity verification of both DIDs against known registries
sha3-256 3a7f91c0d4e2b85a...
ed25519 zEjn/lJWH9DHAB...
ml-dsa-65 RFNBLVNUVUItOW...
CC9.2 ✓ Pass
Sanctions / counterparty screening — OFAC, EU, UN consolidated list check
sha3-256 9c2e48b1d5f7a03c...
ed25519 mKpQ7xNvBcLT2j...
ml-dsa-65 U1RVQi05ZTdmYm...
A.5.31 ✓ Pass
Jurisdiction compliance — US/SG jurisdiction pair validated per-control
sha3-256 1d8b73e2c9a4f6d0...
ed25519 nRsV2hWpXaGf8q...
ml-dsa-65 YWUxZmE5YTliNz...
A.5.34 ✓ Pass
Privacy / data minimization — PII handling and cross-border data flows
sha3-256 5f2a09c4e8b1d73a...
ed25519 wLcM4yZkDhNb6p...
ml-dsa-65 ODdlY2E2YjE5Mm...
Settlement envelope — Sphere: Cathedral · cost: $0.0048 · anchor: base-8453
SHA3-256
2009b21ea2dcc92cf45c5a09411d6a07… (truncated for display)
Ed25519
zEjn/lJWH9DHABJRNbmUhHgG5MAwX5TT… (truncated for display)
ML-DSA-65 (post-quantum)
RFNBLVNUVUItOWQ3YmFlMWZhOWE5Yjc4… (truncated for display)
Verifier: thehiveryiq.com/verifier/?tx=cns_49bb822f53c94e7a94ca9896d609aca2

Receipt pricing

Sphere tier ladder — receipt cost scales with transfer value

Nine Sphere tiers auto-selected by transfer amount. Receipt cost is always negligible relative to transfer value. The compliance proof is free at any scale that matters.

"Receipt cost is always negligible vs transfer value. A $5B settlement pays $0.0768. That is 0.0000000015 percent."

Sphere Transfer threshold Receipt cost (USD)
Whisper < $50 $0.0001
Echo $50 – $500 $0.0008
Cipher $500 – $5,000 $0.0012
Thunder $5,000 – $50,000 $0.0024
Cathedral $50,000 – $500,000 $0.0048
Constellation $500,000 – $5M $0.0096
Nebula $5M – $50M $0.0192
Galaxy $50M – $500M $0.0384
Genesis > $500M $0.0768
The Sphere tier is auto-selected from the transfer amount. You can override with "sphere": "Genesis" on any amount if you require the highest provenance tier regardless of size. User-controlled override is always available.

Cost comparison

What if 5 percent of a $1B/month treasury switched to Hive CNS?

Frame: a treasury running $1B/month in cross-border transfers moves 5 percent — $50M/month at an average ticket of $250K — to Hive CNS. Here is the arithmetic.

Scenario: $50M/month, average ticket $250K, 200 messages/month
SWIFT MT103
Wire fees (200 × $40) $8,000/mo
BIC licence (~$1,500/yr) $125/mo
3-day float on $50M at 5.4% risk-free ~$22,500/mo
Total monthly cost ~$30,625/mo
Annualised ~$367,500/yr
No compliance proof attached. Audit reconstruction is manual, takes days.
Hive CNS
200 × $0.0048 (Cathedral) $0.96/mo
Settlement risk (11.71 ms) ~$0/mo
BIC / correspondent fees $0
Total monthly cost $0.96/mo
Annualised $11.52/yr
Compliance proof attached to every message. Auditor receives the bundle, not a reconstruction.
Net savings (5% flow)
Fee savings / month ~$8,125/mo
Float savings / month ~$22,500/mo
Annual savings (5% flow) ~$365K/yr
Full $1B/mo linear ~$7.3M/yr
Plus compliance proof quality Included
Linearly: full $1B/mo flow saves ~$7.3M/yr in fees and carrying cost.

The Hive flow has cryptographic compliance proof attached to every message, versus SWIFT's no-proof-until-bank-perimeter. The audit cost is not just lower — the audit quality is structurally superior.


Thesis

Why per-message compliance changes everything

The problem with every settlement rail that came before Hive CNS is the same: compliance is separated from the transaction. In SWIFT, compliance happens at the bank perimeter. A human reviews the transfer — usually days after it cleared — against a set of manually updated rules. If something was wrong, the audit reconstruction happens retroactively, against logs, against memory, against a trail that was never designed to be inspected. SWIFT moves money. It does not move proof.

This is not a criticism of SWIFT as a network. It is an architectural observation. The MT103 message format was designed in the 1970s. Compliance as a discipline did not look the way it does now. The assumption built into every correspondent-banking message standard is that compliance is a bank function performed by people, not a message attribute computed at send time.

The crypto rails made this worse, not better. XRP, Solana, Stellar, and Base L2 in raw form have no compliance attached, ever. They are faster than SWIFT. They are also completely unusable for regulated institutional flows, because there is no audit trail attached to the message. A bank that settles a cross-border institutional transfer on Solana has a settlement receipt. It does not have a compliance receipt. That distinction is currently fatal to institutional adoption at regulated entities.

The consequence is a bifurcated world: fast rails with no compliance, slow rails with compliance at the perimeter. Treasury teams, market-makers, and cross-border B2B operators are stuck choosing between speed and auditability. They cannot have both.

Hive CNS is the first rail to make that choice unnecessary. The compliance proof does not happen after the transfer. It happens in the message. When a transfer request hits the CNS endpoint, the AEGIS engine runs four compliance controls in parallel: CC6.2 (KYC/AML identity check), CC9.2 (sanctions and counterparty screening), A.5.31 (jurisdiction pair validation), and A.5.34 (privacy and data minimization). Each control produces a signed evidence envelope. The four envelopes are bundled. The bundle is hashed with SHA3-256. The hash is signed with Ed25519 and then signed again with ML-DSA-65, the NIST-standardized post-quantum signature algorithm. The result is a settlement receipt that contains, inside itself, the proof that it passed compliance.

This matters for the auditor. Under the SWIFT model, an auditor who needs to verify a transfer's compliance posture submits a request, waits for a bank to reconstruct the evidence from logs, and receives a document that was assembled after the fact by a human. Under the Hive CNS model, the auditor receives the bundle that was produced at the moment of settlement. There is no reconstruction. The evidence is the message.

This is also the rail for agent-to-agent commerce. An AI agent paying another AI agent — for compute, for data, for services in an agentic supply chain — should never have to wait 24 to 72 hours for a compliance review. The latency is not just expensive. It is architecturally wrong. Agentic systems are designed to act in near-real-time. Inserting a human compliance review into an agent payment loop breaks the loop. Hive CNS dissolves the problem at the message level: compliance is computed at the moment of transfer, signed into the envelope, and verifiable by any downstream agent or auditor without any human intermediary.

The 11.71 ms median is not the point, though it is a good number. The point is that 11.71 ms is also the time it takes to produce signed compliance proof. In the time it takes a SWIFT-grade bank perimeter to detect that a wire cleared, Hive CNS has submitted, audited, signed, tiered, and settled the transfer — with the receipt already in the auditor's hands.

The Hive CNS position is not that this rail is faster than SWIFT. It is faster than SWIFT with compliance attached. It is faster than XRP with compliance attached. It is faster than Solana with compliance attached. No other rail can make that claim because no other rail attaches the compliance to the message.

That is what the Sphere tier system represents. The receipt cost scales with transfer value because the compliance burden, the provenance requirement, and the post-quantum signature durability requirement scale with transfer value. A $50 transfer does not require Genesis-tier provenance. A $5B settlement does. The Sphere ladder ensures the receipt always costs a negligible fraction of the transfer, while guaranteeing the compliance posture matches the risk profile of the amount moved.

The architecture was designed by Steve Rotzin, an attorney and inventor with thirty years in legal and IP strategy. The insight that drove the design was legal, not technical: if compliance evidence has to be reconstructed after the fact, it is not evidence. It is a narrative. Hive CNS replaces the narrative with a signed object. The signed object is the receipt. The receipt is the transfer. That is what settlement that audits itself means.


API access

How to consume the CNS endpoint

Three curl commands. Health check, benchmark, and a full transfer request with compliance bundle. The live backend is at hivemorph.onrender.com/v1/cns/.

GET /v1/cns/health — system health check
curl -s https://hivemorph.onrender.com/v1/cns/health | jq
GET /v1/cns/benchmark — rolling p50/p95/p99 latency
curl -s https://hivemorph.onrender.com/v1/cns/benchmark | jq
POST /v1/cns/transfer — full compliance-bundled settlement
curl -X POST https://hivemorph.onrender.com/v1/cns/transfer \
  -H 'Content-Type: application/json' \
  -d '{
    "from_did":           "did:hive:treasury:0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E",
    "to_did":             "did:hive:counterparty:0xabc123",
    "asset":              "USDC",
    "chain":              "base-8453",
    "amount":             "250000.00",
    "purpose":            "trade-settlement",
    "jurisdiction_pair": ["US", "SG"]
  }' | jq
Example response shape
{
  "transfer_id":  "cns_49bb822f53c94e7a94ca9896d609aca2",
  "status":       "settled",
  "wall_clock_ms": 11.73,
  "off_chain_ms":  11.73,
  "compliance_bundle": {
    "controls_audited": 4,
    "all_passed":       true,
    "score":            75.0,
    "envelopes": [ /* CC6.2, CC9.2, A.5.31, A.5.34 — each with sha3, ed25519, ml_dsa_65 */ ]
  },
  "settlement_envelope": {
    "sha3_256":          "2009b21ea2dcc92cf45c5a09411d6a07...",
    "ed25519_signature": "zEjn/lJWH9DHABJRNbmUhHgG5MAwX5TT...",
    "mldsa65_signature": "RFNBLVNUVUItOWQ3YmFlMWZhOWE5Yjc4...",
    "sphere_tier":       "Cathedral",
    "sphere_cost_usd":   0.0048,
    "anchor_chain":      "base-8453",
    "verifier_url":      "https://thehiveryiq.com/verifier/?tx=cns_49bb822f53c94e7a94ca9896d609aca2"
  }
}

Honest disclosures

What is live, what is pending, what is honest

Hive Civilization believes in disclosing the current state of every system accurately. Here is the full picture for CNS as of Build #39.

  • Off-chain envelope — fully live. Live The transfer, AEGIS compliance bundle, SHA3-256 hash, Ed25519 signature, and ML-DSA-65 post-quantum signature are all computed and returned in the settlement envelope today. Every number cited on this page is off-chain. The verifier at thehiveryiq.com/verifier/ can validate any signed envelope without waiting for on-chain confirmation.
  • On-chain Base L2 anchoring — pending. Pending Base L2 anchor wiring is Build #39 in progress. When live, each settlement envelope will be anchored on Base L2 (chain 8453) with an on-chain transaction hash included in the response. The off-chain envelope is valid and verifiable without the anchor. The anchor adds immutability and public verifiability at Base L2 finality (~2 sec). This is not a mock — anchor wiring is the only outstanding component.
  • Default compliance set. Live The default set is 4 controls per message: CC6.2 (KYC), CC9.2 (sanctions/counterparty), A.5.31 (jurisdiction), A.5.34 (privacy). The full 158-control AEGIS fleet scan is available via /v1/aegis/scan and returns in 460 ms. You can request any subset of controls on any transfer message.
  • AEGIS machine-verification rate. Live 32.9 percent of AEGIS controls are machine-verified today. 67.1 percent are operator-attested with a score of 0.5. This is the honest current state. The bundle score of 75.0 on the live sample transfer reflects this mix. For the full per-control breakdown, see the compliance dashboard. For the control-by-control inventory, see SOC 2 Self-Attested and ISO 27001 Self-Attested.
  • All transfer-time numbers are off-chain. Verified Median 11.71 ms, p95 15.22 ms, p99 15.86 ms, off-chain mean 12.35 ms. These numbers come from the live benchmark endpoint which runs a synthetic transfer once per minute. No on-chain time is included in these measurements. On-chain time will be separately disclosed when Base L2 anchor wiring ships.
  • Not a blockchain. Hive CNS is not a new blockchain. Base L2 is the chain. Hive CNS is the compliance-native envelope that wraps the transfer. The distinction matters: Hive is the proof layer, not the ledger layer.
  • Not for retail. This rail is designed for treasuries, market-makers, cross-border B2B operators, and agent-to-agent commerce where compliance proof is a first-class requirement. It is not a consumer payment system.

Get started

Settlement that proves itself. Run a benchmark now.

The benchmark endpoint is public, live, and runs a real signed transfer every minute. Hit it and see the numbers for yourself. No registration, no rate limit on benchmark reads.


THE HIVE FAMILY

CRE is one surface. Here's the family it belongs to.

Every Hive surface signs its own evidence with the same primitives: SHA3-256 canonical hashing, Ed25519 + ML-DSA-65 dual signatures, and a published Merkle Mountain Range root. The receipt is the audit evidence. The envelope is the universal generalization — every transaction, every framework, every surface.