Every entry is hash-chained back to genesis, so altering any record breaks the chain from that point forward. The ledger does not ask you to trust that history is intact — it lets you prove it.
The ledger is a continuous cryptographic chain in which every entry binds to its predecessor, making the past a fixed dependency of the present.
The chain begins at a defined genesis state, and every subsequent entry derives from the hash of the state before it. There is a single, provable origin for the entire monetary history.
Each new entry includes a cryptographic hash of the prior ledger state. Changing any earlier record changes its hash, which invalidates every hash that depends on it.
Because the linkage runs forward from genesis, a single altered entry does not stay local — it breaks the chain from that point all the way to the current head.
The chaining relies on cryptographic hash functions for which producing a matching alternative history is computationally infeasible, so the chain cannot be quietly re-forged.
The ledger's guarantee is detection: any change to a committed entry is provable by anyone who can recompute the chain.
Editing, deleting, or reordering a committed entry breaks the hash linkage. The tampering announces itself the moment the chain is verified, rather than hiding in a mutable database row.
Any party with the ledger can recompute the hash chain from genesis and confirm the current head matches. Integrity does not depend on trusting the operator's word.
There is no supported operation to overwrite history in place. Corrections are new signed entries appended to the chain, so the original record and its correction both remain provable.
Beyond linking records, the chain binds each entry to the authority that produced it, so both what happened and who authorized it are permanent.
Each entry carries the signature of the key that authorized it, so the chain records not only the state change but the cryptographic proof of consent behind it.
Entry signatures use ML-DSA-65 under FIPS 204, so the authority binding on historical records remains sound even against future quantum adversaries.
Because key grants and revocations are themselves on-ledger, the chain proves that each entry was signed by a key that held authority at the exact moment it was written.
The ledger is designed so that auditors and supervisors can verify integrity directly rather than sampling reports generated by the system under audit.
The entire monetary history can be replayed from genesis to reconstruct the current state, letting an auditor confirm that today's balances are the exact consequence of every recorded event.
Any past state can be cryptographically pinned, so a supervisor can prove what the ledger held at a given moment without relying on a snapshot the operator chose to keep.
The ledger and its full history reside within the issuing nation's environment, so tamper-evident audit is exercised entirely inside sovereign jurisdiction.
Every audit claim reduces to recomputing hashes and checking signatures, so confidence in the record comes from mathematics the auditor can run, not from assurances by the vendor.