Record

What it does

Every entry carries the hash of the entry before it and a signature, so any rewrite of the record is detectable without trusting the machine that wrote it. One writer, one file, no consensus protocol: not a blockchain. Self-custody of the record ends here. The Ledger is the one instrument in the estate that has been built and measured rather than argued; both running implementations are described under Implementation.

When it is used

Eighth, and continuously: the record is written before the system acts, not after.

The record that supplies it

• 15
  The Glass Ledger

  Stage 8 · RecordStanding instrument. A tamper-evident decision journal for AI agents: about 600 lines of Python, MIT-licensed, shipping with a demo that attacks its own ledger four ways. Version 2.

  2026-07-23 · Record 15 · doi:10.5281/zenodo.21515861

The worksheet itself, lifted intact from that record, is stage 8 of The Instrument Deck.

Two running implementations of this instrument — a frozen-weight personal agent whose ledger the agent may not read, and a sovereign memory service — are described, with their measurements, under Implementation.

Papers that bear on it

• The Second Signature — Self-written records cannot testify. The double-trust architecture that lets a machine's record be checked by someone who does not trust the machine.