The Consignment File
22 October 2026 · John Stroh, Director, My Digital Sovereignty Ltd
What it is
A consignment file puts the signed supply-chain records for one lot, the signed record of who decided to send them, and an invoice that shows only the figures the holder chooses, into a single file. Anyone can check the file on their own computer with one readable program, with no account and no connection to MDSL. The invoice member is built and downloadable: it has its own checker, and version 2 of the file checker folds it into the single check.
The platform assembles the file from a Provenance™ dossier and an Email Decision Record™ dossier; a signed email record is tied to the lot by its lot reference. An owner can propose sending the file to one outside recipient through the Email Decision Record. The proposal is held until a second person, never the sender, approves it. The invoice comes from Attested Accounts™: every field is held as a salted hash, and only lot reference, quantity, unit, currency, total and date can be shown. Every other field stays a hash.
A stranger can check that each signed record is unchanged since it was signed and which key signed it, that a signed email record names the lot, and that the time stamps were issued by an outside authority where the records carry them. The checker is at mysovereignty.digital/downloads/consignment-verifier.js, SHA-256 151ef62443703208f75cf5c9a569542a46eaf3f890f3385629bc4c3374615c16. Version 2, which also checks the invoice, is at mysovereignty.digital/downloads/consignment-verifier-v2.js, SHA-256 1ffb7fa4d51ea61af3cd02ce3e6c82dc9b5b57ce5892dcd8f962f852697597c5, and the invoice checker is at mysovereignty.digital/downloads/invoice-bundle-verifier.js, SHA-256 96ac2ac454da385d1f0b93ed2040e2bbb1959973135af57820161ad64da5111f; the same files are served at agenticgovernance.digital/downloads/. They need Node.js only. The platform routes take an optional invoice and then produce a three-member version 2 file, which version 2 checks; the invoice must carry a lot reference the lot has offered, refusals are uniform, and it is switched on per Village on request. The invoice member has no day root or outside time stamp of its own: Attested Accounts day roots are not built, so invoices are not in the estate root or the daily fingerprint. One check does not prove the invoice is true.
What the file does not show: that the goods match the paper, that any rule is met, that a record is complete, or who wrote an email. A hidden invoice field shows that it exists and has not changed, not what it says. Membership of the file is not attested. It is not a legal opinion, an audit or a certification.
Available on request. Evaluation access is a one-time link at MDSL's discretion; there is no signup. The software was built by AI agents under John Stroh's direction and reviewed by AI agents; no person has audited it. MIO has not been formed, and nothing here is an offer.
Built vs roadmap
Status as of 22 October 2026, established by AI agents from the code and commits; no person has checked every line (see the status page).
| Capability | Status | What it means for a customer |
|---|---|---|
| Assemble a consignment file from a Provenance dossier and an Email Decision Record dossier | Built and deployed 21-22 October 2026 | The platform builds the file for a lot; nothing is stored by the assembly step. No customer is claimed |
| Offline checker, version 1, one readable file | Available on request | A stranger checks the Provenance and Email Decision Record members of a two-member file offline and compares the checker's SHA-256 with the value above |
| Propose sending the file to one outside recipient through the Email Decision Record | Built and deployed 22 October 2026 | Always held for a second approver, never the sender. A person still decides. The record shows which login or key was used, not who wrote the text |
| Invoice lot fields and the redactable invoice member, with its own offline checker | Built and deployed 22 October 2026 | Available to download. A hidden field shows that it exists and has not changed. The invoice has no day root or outside time stamp, and invoices are not in the estate root |
| Consignment checker version 2, folding the invoice into the single check | Built and deployed 22 October 2026 | Available to download. The platform routes include an invoice when one is named (deployed 22 October 2026, commit 29d321e1e0), on request per Village |
| Key custody and time stamps | Live | A check reads unchanged since signing, subject to who holds the signing key (MDSL holds it; see the evidence page) and to the time-stamping authority |
The full participant one-pager, with the competitive landscape and the risks and open decisions, is shared in the private room, to named people, with a record of who opened it. Write to john.stroh@mysovereignty.digital to be invited.