No tier runs
without the log.
Our security baseline is included on every plan. Below are the public verification keys, hardware key custody rules, and privacy protections that keep customer data off the public log.
| Key Role | Key ID | Custody & Protection | Status |
|---|---|---|---|
Production Log Signing Key (log.hivemindax.com/2026) |
Rx-uiNyTmAj4L4b5coT42jjuj87aVn-oUNdHp7lsMqQ |
Hardware Security Module (AWS KMS Ed25519) · log.hivemindax.com/2026+9a60a76c+AUEXcDkXZ/RzLu8DxwHPhkOKXj/uNzGSGE98UVrwiuK6 |
Active · T1 |
Production AX Issuer Key (receipts.hivemindax.com) |
4rNCv0rPePZkoNgP5CZzsYoltOKkLPO8zbV7E0CPRRo |
Hardware Security Module (AWS KMS Ed25519) · SPKI MCowBQYDK2VwAyEA+bgnODAhm3jCaYEzVfkDvvyAj/riLN2m67LmyUR4new= |
Active · T1 |
| Public Log Signing Key (Conformance Vectors) | 7qZtsGuOy1CEt_-3lzTbqb2lNAmwFtQm4cx9OL3FmUA |
Hardware Security Module (HSM) · quarterly key rotation | Active · T1 |
| Sample Agent Issuer Key | flM7UIzqowSew8oOmMtXgzF2rEnI0lzhPHrFjrSwuBk |
Workload identity attested (vectors.example) |
Active · T1 |
| Revoked Test Key | LHDlw4vjt__LsP0s995v0xQ9eMAMUETnTzpgzmw7uJk |
Published on revocation list · rejected by verifier | Revoked |
How we protect private data on a public log.
Salted SHA-256 commitments on the public log.
The public log stores only salted SHA-256 commitments of the request, response, and subject identifier. Raw prompts, tool payloads, and personal data never enter the public Merkle tree.
Per-subject key deletion (crypto-shredding).
Detailed off-log payloads are encrypted with per-subject keys (RFC 9180 HPKE). Deleting a subject key permanently renders the encrypted off-log payload unrecoverable while preserving the integrity of the public Merkle tree hashes.
Responsible security disclosure.
Found a vulnerability? Email security@hivemindax.com. A human engineer reads every report directly.