Computing a SHA-256 fingerprint inside the customer's browser hashes onboarding identity and counterparty due-diligence material before it is posted to the kyc/* prefix on OSS, keeping raw data off the wire. The hash-trust model mirrors digital warehouse receipts, with the object shifting from title to identity.