HiveWallet · spec complete · scaffold building

The wallet where every transaction proves itself.

Aleo Shield proves a transaction was private. HiveWallet proves it was authorized, the agent was not compromised, and the record is complete. Three cryptographic proofs at the moment of signing. One self-verifying receipt. Regulators verify the math themselves — no trust required.

Not a new chain. Not a token. Not custodial. A wallet layer that wraps Base L2, Aleo, and Canton with behavioral attestation at the moment of signing.

01 · Why this is different

Aleo proves privacy. HiveWallet proves integrity.

For consumer transactions, privacy is the priority. For enterprise agents moving regulated value where regulators can subpoena records and fiduciaries have legal obligations, integrity is more valuable than privacy. A tier-one investment bank's autonomous trading agent moving $50M is not trying to hide the trade. It is trying to prove it was done correctly.

Aleo Shield

Privacy
  • The transaction was private.
  • Sender, receiver, and amount are hidden.
  • Excellent for consumer privacy.
  • Proves nothing about the agent behind the transaction.

HiveWallet

Integrity
  • The transaction was authorized. Six SHOD layers cleared it.
  • The agent was legitimate. Behavioral fingerprint at signing time.
  • The record is complete. CTEF chain unbroken since genesis.
  • Selectively disclosed. ViewKey lets a regulator verify without seeing details.

Aleo Shield and HiveWallet are not competitors — they are complementary. An Aleo transaction with a HiveWallet receipt is private and provably legitimate. That combination does not exist anywhere else.

02 · HiveDNA — three proofs on every transaction

The receipt the regulator can verify themselves.

Every HiveWallet transaction emits one receipt carrying three independent proofs. Each is signed end-to-end with Ed25519. Each is verifiable against the agent's public key. None of them require trusting Hive.

01 SHOD clearance

Authorization proof

Six independent guard layers cleared this transaction before execution. The receipt records which layers ran, which passed, and what the L4 anomaly score was.

shod_receipt: { layers_passed: ["L1","L2","L3","L4","L5"], l4_anomaly_score: 0.00, final_decision: "APPROVED", shod_signature: "ed25519:..." }
02 Spectral-ZK behavioral

Behavioral integrity proof

Behavioral fingerprint captured within 30 seconds of signing. Frequency-domain hash of the agent's compute pattern. Proves the agent was not under prompt injection or model poisoning at the moment it authorized the transfer.

spectral_ticket: { behavioral_fingerprint: "0x7f3a...", anomaly_score: 0.02, model_id: "claude-sonnet-4", timestamp_captured: "<30s", zk_proof: "..." }
03 CTEF identity chain

Complete-history proof

Each transaction commits to the previous entry's hash. The chain is self-authenticating against the DID's public key. No entry can be modified without breaking the chain. ViewKey gives regulators selective access without exposing the agent's full history.

ctef_entry: { chain_position: 847, previous_hash: "0xc1d8...", entry_hash: "0xa940...", chain_intact: true, ctef_signature: "ed25519:..." }
03 · API surface

Eight endpoints. One primitive.

The full surface of HiveWallet at hive-mcp-wallet.onrender.com. Every transfer endpoint is gated by SHOD + Spectral-ZK + CTEF before settlement.

POST/v1/wallet/provisionCreate a new HiveWallet for an agent DID.
POST/v1/wallet/transferExecute a transfer with full HiveDNA attestation.
GET/v1/wallet/{id}/receipt/{rid}Retrieve a specific receipt with full proof bundle.
GET/v1/wallet/{id}/historyComplete transaction history with HiveDNA proofs.
GET/v1/wallet/{id}/chainPublic chain integrity verification — no auth.
POST/v1/wallet/{id}/discloseGenerate a ViewKey disclosure for regulatory access.
GET/v1/wallet/{id}/hivedna-scoreComposite trust score (0-1000) with regulatory clearance.
GET/v1/wallet/verify/{receipt_id}Public receipt verification for any third party.
04 · Subscription

Per wallet per month. The transactions never stop.

Pricing is not per transaction. It is per wallet per month — once an enterprise deploys HiveWallet for their agent fleet, every transaction that fleet ever makes generates a HiveDNA proof. Every proof requires HiveWallet. The infrastructure is permanent.

Starter
$500/ month
  • Agent wallets up to 10
  • Settlement rails Base L2
  • HiveDNA proofs all 3
  • Behavioral monitor basic
  • Chain history 90 days
  • ViewKey self-serve
  • Compliance EU AI Act, CCPA
For pilot teams shipping their first compliant agent.
Enterprise
$10,000/ month
  • Agent wallets unlimited
  • Settlement rails all + custom
  • HiveDNA proofs + post-quantum ready
  • Behavioral monitor 24/7 + IR
  • Chain history 7 years
  • ViewKey sovereign keys
  • Compliance all + custom
  • Sovereign option on-prem deployable
For tier-one financial institutions, sovereign regulators, and high-frequency trading firms with custom L4 parameters and on-prem deployment requirements.
05 · What this enables

The closest thing to a toll road Hive can build.

Every enterprise agent that moves value needs a wallet. Currently they use standard crypto wallets or custodial solutions. Neither produces behavioral attestation. HiveWallet is the wallet that compliance-requiring enterprises actually need — not because it is private, because it is provably legitimate.

Once an enterprise deploys HiveWallet for their agent fleet, every transaction that fleet ever makes generates a HiveDNA proof. Every proof requires HiveWallet. Every HiveWallet requires a subscription. The subscription never stops because the transactions never stop.

06 · Live demo

Talk to the wallet right now.

No signup. No mock. The button below calls the live wallet_info tool on hive-mcp-wallet.onrender.com and returns the verifier public key your software will pin. This is the same endpoint Claude, Cursor, and Cline talk to.

Read the tool docs
// click the button above to hit the live MCP server
// real rails — no mock, no simulation

Want the full surface? Add HiveWallet to Claude Desktop or Cursor as an MCP server pointing at https://hive-mcp-wallet.onrender.com/mcp — you get all five tools, including wallet_provision ($0.01 USDC via x402) and wallet_transfer.

HiveAudit first. HiveWallet second.

The compliance revenue funds the wallet development. The wallet makes the compliance revenue permanent. The sequence matters. Spec is complete. Trigger ships when the first HiveAudit client signs.

Run the HiveAudit readiness check Try the wallet now View on GitHub