The trust cost of a digital receipt comes from proving the record was never altered. Computing the hash in the browser while raw fields stay local yields an auditable fingerprint without exposing either counterparty's position — the path SNSUC's receipt module actually ships.