Title holders generate a 256-bit SHA-256 digest locally via Web Crypto; the private key never leaves the device, and carbon-footprint fields are hashed on-chain for tamper-evident audit.