Prove which plays are real before a royalty dollar moves.
SRPR is the Signed Royalty-Provenance Receipt: a patent-pending, offline-verifiable attestation that binds a fraud or AI-origin determination to its exact effect on a shared payout pool — across music, video, podcasts, and live. One signature per batch. Post-quantum sealed. Independent of the platform that pays out. Set the pool, set the fraud rate, mint a real receipt in your browser.
Follow one famous track through one royalty period.
The simplest way to understand SRPR: take a work everyone knows, run it through a single payout cycle on any platform, and watch where the signed receipt drops in. The platform keeps its own engine and its own data — SRPR seals the result. Same flow runs across every work in the catalog, every month — a song, a podcast, a film, an audiobook.
Pick one and watch the mechanism catch a fake play below.
The play counts live in the platform's own playback logs — the same data it already uses to calculate royalties. SRPR never asks for new tracking; it reads the platform's existing determination.
The platform licensed the recording from the label or distributor, which delivered it with industry identifiers. The platform holds the usage and runs the integrity call — so the platform mints the receipt.
The track is pinned by its ISRC (recording) and ISWC (composition) — the same codes labels, PROs, and DDEX reports already use. The receipt commits to those plus the period and market, then the platform signs it with its own key. Identity is bound, not asserted.
The plays come in
In a given month, “One Dance” logs millions of plays. Most are real fans. A slice are bots, click farms, or undisclosed manipulation.
raw stream countThe platform's engine decides
The platform's own fraud filter flags the fake plays and keeps the real ones. This is the determination — the call the platform already makes today.
fake plays excludedSRPR seals the call
At payout time, SRPR mints one receipt binding the ISRC/ISWC, the real-vs-fake split, the model and policy version, and the exact pool effect — then the platform signs it.
receipt minted & signedAnyone can verify
The artist's label, a PRO, or a court verifies the receipt offline with the public key. No call back to the platform, no trust required — the math is provable.
offline-verifiableProof the real plays were counted and the fakes were caught
- A signed artifact showing exactly how many plays counted toward the pool — not a dashboard number taken on faith.
- If a payout looks wrong, the artist's team holds an independently verifiable receipt instead of filing a support ticket and waiting.
- In a dispute or lawsuit over fake streams, the receipt is tamper-evident evidence of the calculation basis — portable, no expert re-run needed.
- Pinned to the track's ISRC and ISWC, so it reconciles in one format across every platform.
A tool to sell, and a shield in payments and legal
- Turns fraud-fighting work the platform already does into a premium, provable service — an artist-trust feature it can offer and price.
- Settles payment disputes with one receipt instead of a manual investigation, cutting reconciliation cost and support load.
- In litigation or a regulator inquiry, hands over a signed evidentiary trail for the divisor — defensible, not “trust our internal logs.”
- Sensitive listener and stream IDs stay committed and private; the receipt proves the outcome without exposing user data.
Someone tries to game a payout. The determination fires. A receipt seals what really happened.
A fake stream is the same move everywhere: a bot or a bootleg pushes plays to skim a pool that belongs to real creators. Watch one fake attempt get caught, excluded, and sealed into a signed receipt the platform can hand a rightsholder, an auditor, or a court. The works cycle — a song, a podcast, a film, an audiobook — because the mechanism is identical.
The same receipt that proves an AI inference, pointed at a money-moving decision.
A fraud or AI-origin call is itself a model inference: a model takes an input and emits a determination. SRPR signs that determination the way we sign any inference — a commitment over the inputs, the model and policy version bound in, one post-quantum seal, verifiable offline by anyone. It is not a new kind of thing. It is the provenance rail for every model-made decision that moves a royalty dollar — built before a platform is forced to need it.
Same family as our inference receipts
A determination is an inference. SRPR commits to the inputs, binds the model and policy version, and seals it once — identical machinery to the receipts that already prove a chat completion or a live session.
For the agentic catalog that's coming
As AI-assisted and agent-made tracks flood every catalog, “which model decided this was legit” becomes the central audit question. A signed, model-bound determination answers a regulator years ahead of “our system flagged it.”
Holds for the life of the dispute
A royalty record is a long-lived financial document. Classical signatures erode as quantum advances; these are sealed with ML-DSA-65 today, so a receipt minted now is still defensible whenever the dispute lands.
Streaming royalties are a fixed pro-rata pool. Every fake play steals from a real artist.
A platform pays ~70% of revenue into one pool, then splits it by share of real plays. Fraud, bots, and undisclosed AI tracks dilute the divisor — so honest creators get less than they earned. Platforms catch enormous volumes of this every year. What's missing is a way to prove, after the fact, which determination moved which dollar.
No independent proof for the work already done
A platform runs a strong fraud filter and reports the results, but a rightsholder, regulator, or artist still has no external artifact confirming the divisor. Good work without a verifiable receipt is hard to defend in a dispute.
Determinations leave no receipt
Tracks get removed and streams get zeroed out, but the decision evaporates. When a label disputes a payout, or a court asks for the basis, there is no signed artifact tying the call to the dollar effect.
Every platform reinvents it alone
Spotify, Apple, YouTube, Amazon each build a private, incompatible integrity system. A label reconciling across all four gets four black boxes and zero portability.
Set the pool. Set the fraud rate. See the dollars SRPR puts back.
This is the part that pays for itself. Move the sliders and watch how much of a royalty pool is being diluted by fraud and undisclosed AI — and how much a provable recovery rate returns to honest rightsholders, on a defensible, signed basis.
Priced as a primitive, not a tax. We charge for the proof and the protection.
We do not price per stream and we do not take a cut of the pool — the payout is not ours to claim. The model is three stacked lines, aligned so we get paid more only when more is protected. Figures below are illustrative and driven by adoption and provable recovery; the shape is the point.
Per-receipt fee
A micro-fee on each sealed determination — the fraud, AI-origin, and pool-qualification calls a platform already makes.
Integrity-recovery share
A share of the dollars a platform provably protects via sealed receipts — never of the whole pool, only of what it recovers.
Indemnity / evidentiary tier
An annual license for indemnity-grade SLA and a signed evidentiary trail for legal and regulatory use.
Not just music. Any medium where a determination decides who gets paid.
Music is the clearest example, but the pattern is everywhere: a platform runs an engine that decides what counts — real vs. fake, human vs. AI, valid vs. invalid — and then money flows by share of what counted. Every one of those decisions is a model-made determination that moves a dollar. SRPR signs it. The determination engine differs by medium; the receipt is identical and portable across all of them.
Recorded music royalties
A fixed pro-rata pool split by share of real plays. Platforms remove tens of millions of spam tracks and apply stream thresholds before paying out billions to rightsholders each year.
Creator video monetization
Platforms route tens of billions in ad revenue to creators by share of valid views, invalidating non-organic views and running rights-match claims before revenue splits.
Spoken-word and podcast payouts
Audience-driven payouts and ad-share programs distribute hundreds of millions to publishers, after removing tens of thousands of fake or spam shows and verifying eligible listens.
Live streaming and user content
Live platforms separate real concurrent audience from bot inflation, withholding or clawing back payouts tied to fraudulent viewership and invalid ad impressions.
One receipt. Every payer who runs a pro-rata pool.
Below is the music case in detail, since it is the largest and most contested today. The same primitive drops into any platform that pays creators by share of plays, views, or listens — the determination engine differs, the signed receipt is identical and portable.
Spotify — prove the divisor before $11B moves
Spotify removed 75M+ spammy tracks and 57K fake podcasts in twelve months and added a 1,000-stream royalty threshold. That is the determination. SRPR turns each determination into a signed receipt binding the track and stream to its included/excluded effect on the pro-rata pool, for the stated market and period.
- Each removal or threshold call mints a receipt: asset commit, stream commit, outcome, pool effect, model + policy version.
- The DDEX AI-credit disclosure becomes a provable ai_origin determination, not a self-reported flag.
- A label disputing a payout gets an offline-verifiable artifact instead of a support ticket.
- A high-profile fake-stream dispute gets a signed evidentiary trail for the calc basis.
Apple Music — sign the per-stream rate basis
Apple pays a published per-play rate and audits for artificial streaming. SRPR attaches a signed receipt to each integrity determination, so the rate applied to a play is bound to a provable judgment about whether that play was real and human-originated.
- Every excluded play carries a receipt the rightsholder can verify without calling Apple.
- AI-origin determinations ride the same receipt for disclosure-rule compliance.
- Portable across Apple's distributors, so reconciliation is one standard, not many.
YouTube Music — bind valid-view calls to payout
YouTube already invalidates non-organic views and runs Content ID claims. SRPR makes each valid-view and each claim determination a signed, portable receipt — so the revenue split that follows has an independent, tamper-evident basis a claimant can check.
- Invalid-view determinations mint excluded-effect receipts tied to the monetization pool.
- Content ID match calls carry a receipt binding asset, claim, and revenue-share effect.
- Cross-checks against Spotify/Apple receipts because the schema is the same.
Amazon Music, the major labels, and the PROs
The value compounds when the receipt is the same everywhere. A label reconciling across every platform, or a rights organization like SoundExchange or the MLC distributing a collective pool, gets one verifiable format instead of one black box per payer.
- Amazon Music mints the identical receipt for its own pro-rata pool.
- UMG / Sony / Warner reconcile across all DSPs against one schema.
- SoundExchange / MLC attach signed provenance to collective-license distributions.
- Every new payer that adopts SRPR makes every existing receipt more valuable.
Mint and verify an SRPR in your browser. No server. No secret.
This runs the actual SRPR primitive in your browser with WebCrypto. It commits each event, builds a Merkle root over the determinations, signs the payload, and verifies it offline. Then tamper with one outcome and watch verify reject it — exactly what an auditor's laptop would do.
Determination batch
Six plays from one period. Three legit and included in the pool, three fraudulent and excluded. Sensitive stream IDs are committed with off-receipt salts.
// Click "Mint + sign receipt" to build a live SRPR. // Everything below runs locally with WebCrypto — nothing leaves your browser.
A receipt only has value when an independent party issues it.
Your fraud teams are already world-class at catching bad streams. SRPR adds the one thing internal tooling structurally can't: proof a rightsholder, regulator, or artist can verify without taking anyone's word for it. We hand you that proof — you keep running your engine.
An independent signature carries weight a self-signed one can't
A receipt that proves the royalty divisor is honest lands hardest when a neutral party issues it. Hive is that third party. You get external credibility for results your own teams already produce.
One format every payer trusts
A label reconciling across Spotify, Apple, YouTube, and Amazon needs one verifiable schema, not four private ones. A neutral standard across all of them means your receipts already speak the language every rightsholder is asking for.
ML-DSA-65, built and running
SRPR seals on a NIST FIPS 204 post-quantum signer. This is years of substrate work — the same signer behind every Hive receipt. You get a future-proof cryptographic guarantee without standing up a crypto team to maintain it.
Patent Pending on the primitive
The method — binding a determination outcome to its pro-rata pool effect with a redaction-compatible, offline-verifiable signed receipt — is filed. The primitive is protected, not just the implementation.
Aligned with accuracy, not with any side
Hive is paid per receipt and on integrity recovered. We have no stake in any artist, label, or platform winning a dispute — only in the determination being provable. That neutrality is what makes the receipt trusted by everyone downstream.
You recover real dollars. We price to the value.
Royalty-pool integrity is one of the largest line items in streaming. SRPR makes the savings provable and the proof billable: a per-receipt fee, an integrity-recovery share, and an indemnity tier. You pay against value delivered, not a subscription.
From this page to a live receipt to production, without a meeting.
You already minted a receipt above. The production path is the same three calls, pointed at your determination engine. Drop-in SDK, one signing endpoint, offline verifier ships with the key.
Wrap your determination engine
Your existing fraud filter or AI-origin classifier emits its verdicts. An adapter (stream_fraud or ai_origin) normalizes them — no change to your ML.
Mint a batch receipt
One call per period builds the Merkle root and posts the signing payload to the Hive signer. One ML-DSA-65 signature seals the whole batch.
Hand the receipt to anyone
Labels, regulators, and artists verify offline with the public key — no call back to you. Sensitive stream IDs stay committed, never disclosed.
// 1. your engine's verdicts, normalized by the stream_fraud adapter const batch = { pool_ctx: { pool: "global-premium", market: "US", period: "2026-05" }, model_ref: "mir:stream-integrity:v3", policy_ref: "policy:fraud-threshold:2026.05", events: streamVerdicts, // [{track_id, stream_id, verdict, confidence}, ...] }; // 2. build + sign — one ML-DSA-65 signature for the whole period const { receipt, signing_payload, secrets } = buildReceipt(batch, { engine: "stream_fraud" }); const sig = await hiveSigner.sign(signing_payload); // POST to the Hive signer // 3. anyone verifies offline, no secret, no callback const { ok, problems } = verify(receipt, sig, HIVE_PUBLIC_KEY); // ok === true -> divisor basis is provable for this pool/market/period
determination_provenance_only — it proves the determination, the asset and event it bound, its pro-rata pool effect, and the model and policy version that produced it. It does not assert that the determination is substantively correct. Dollar figures in the simulator are illustrative and driven by your slider inputs. Spotify rightsholder-payment and track-removal figures are public 2025 reporting. SiGR, MiR, GCA, AFiR, and the full primitive family live at /.