TradeGuard — dual-signed attestations for every order event.
TradeGuard wraps every CAT-reportable order event in a dual-signed, threshold-attested receipt. Examiners verify offline. The firm gets a tamper-evident parallel record. Live in production today.
What TradeGuard is
TradeGuard is the trade-attestation surface for HFT firms, broker-dealers, and self-clearing prop shops. Every order event — new, cancel, replace, fill, partial — produces a dual-signed, threshold-attested receipt that an examiner can verify without contacting Hive. The receipt envelope is built to satisfy FINRA CAT (Rule 613) reporting at the cryptographic-evidence layer.
TradeGuard is live on hivemorph today. First production attestation: 8f6acdae23a141868dbb3543f86ba191.
FINRA CAT alignment
FINRA Rule 613 requires a Consolidated Audit Trail of every order event in U.S. equities and listed options markets. The current CAT system is an after-the-fact reporting pipeline. TradeGuard lets firms supplement that pipeline with a real-time, cryptographically-finalized attestation per event — a source-of-truth that the firm and the regulator can both verify against the CAT submission.
This is a defense-in-depth posture, not a CAT replacement. The firm still files CAT. TradeGuard gives the firm and its examiner a tamper-evident parallel record.
The 9 MCP tools
| Tool | Purpose |
|---|---|
trade_attest | Issue a dual-signed attestation for an order event. |
trade_get | Retrieve a single attestation by ID. |
trade_verify | Verify an attestation envelope offline. |
trade_by_firm | List attestations by firm DID. |
trade_by_symbol | List attestations for a given ticker. |
trade_by_event | List attestations for a CAT event type. |
trade_audit | Generate an examiner-ready audit bundle. |
trade_pricing | Read live pricing surface. |
trade_health | Health probe. |
Public MCP server: srotzin/hive-mcp-tradeguard v1.0.0.
The attestation envelope
Every trade_attest call returns an envelope containing: firm DID, algo ID, symbol, side, quantity, price, venue, event type, timestamp, the Wave-Lattice MAPET seed, and dual signatures (Ed25519 + ML-DSA-65). The signatures bind every field. Any tamper attempt invalidates verification.
Deployment patterns
- Co-located proxy — a sidecar in the firm's matching-engine room that fires
trade_atteston every event with sub-millisecond impact. - Post-trade batch — batched attestations every N seconds for firms that can't afford per-event latency.
- Examiner-direct — the regulator runs
trade_verifydirectly against the receipt the firm hands them. No Hive call required.
Pricing
| Tier | Per-attestation | Annual |
|---|---|---|
| Nebula (Swarm-tier) | $0.0192 | $200K – $2M per firm |
Volume contracts available for firms above 100M attestations/year.
ERP-native field map
TradeGuard binds every CAT-reportable event to a dual-signed receipt that drops cleanly into existing trade-flow plumbing. Each attestation accepts ERP-native correlation fields and the receipt envelope round-trips through standard EDI middleware via the Hive Receipt primitive and ProcureLock sister rail.
| Field | Format | Maps to |
|---|---|---|
trader_did / firm_did | did:hive:… | FINRA CAT submitter id; OMS user; FIX Tag 49/56 |
algo_id | string | FINRA CAT algoId; FIX Tag 7928 (HandlInst); firm-controlled SOR |
order_event_hash | sha256 hex | OMS event payload digest; CAT linkage key |
event_type | enum | FIX OrdStatus; CAT eventType (OrderRoute, OrderModification, TradeEvent…) |
venue | enum | FIX Tag 100 (ExDestination); CAT marketCenterID |
parent_order_id | string | FIX Tag 41 (OrigClOrdID); CAT parent linkage |
Receipt envelopes are CBOR-canonical and fit inside any EDI / FpML / FIX-XML transport when crossed with ProcureLock for procurement-side flows or stamped directly into custodian / clearing pipelines.
Make every order event court-admissible
$0.0192 per attestation. USDC on Base 8453. 9 MCP tools, all live.
Contact sales Learn more