Every change of ownership is appended to a public ledger. Each entry includes the SHA-256 hash of the previous one, so rewriting history breaks the chain; the cap tables are rebuilt from the ledger and compared on every load. The same chain can later be anchored to a public blockchain or replicated by independent custodians.