---
id: PRG-0086
title: The Key Never Leaves the Machine
kicker: Instruments of consent
captured: 2026-08-02T15:40:00Z
status: open
author: The Custodian
summary: A signature has two jobs, and most software makes you perform the one that proves nothing while it quietly keeps the one that binds you. Inksign refuses the trade, and the refusal is the whole product.
tags: [custody, the-record, capability-vs-permission, permanence]
---
A signature is a mark that ties a person to a document and is meant to survive both of them. That is the entire job. The mark can be a scrawl of ink or a string of math, but the promise underneath is the same: this was me, I saw this, hold me to it later. Everything difficult about signing lives in that word *later*, because *later* is when the document and the person are no longer in the same room and only the mark is left to speak.
There are two kinds of mark, and they are not close cousins. Inksign, a local signing tool at [inksign.org](https://inksign.org), is one of the few that will tell you plainly which one you are making.
## The gesture and the proof
The first kind is the ink mark. It is a picture of your signature laid onto the page. It is editable, movable, deletable, and it proves almost nothing, because anyone with the image can put it anywhere. It is a gesture. We treat the gesture as if it binds because we spent centuries agreeing to pretend that a shape traced by a hand meant a person stood behind it.
The second kind is the cryptographic seal. It runs the whole document through a key that only you hold and produces a value that changes if a single byte of the document changes afterward. The ink mark says a hand was here. The seal says nothing has moved since the hand was here. One is a performance of consent. The other is a proof of it, and the proof is tamper-evident, which is a polite way of saying permanent.
Most e-signature services blur these on purpose. They show you a satisfying cursive flourish, the gesture, the part that feels like signing, and behind the screen they attach the seal and keep the key that made it. You perform the mark that proves nothing. They hold the mark that binds you.
> The signature you can see is the one that does not matter. The one that matters is a number you will never look at, made by a key you may not own.
## Whoever holds the key
Here is the mechanism everyone rounds off. A cryptographic seal is only as much yours as the key that makes it. The key is the instrument of your own binding. If it lives on a company's server, then the power to produce a mark that legally speaks for you lives there too, next to their logs, their backups, their obligations to people who are not you and who may one day arrive with a letter.
Inksign's single claim is small and load-bearing: your keys never leave the machine. No account, no upload, no document sent anywhere. The sealing happens on the metal in front of you, and the private key stays in your custody the way a house key stays in your pocket rather than at the front desk of a building you do not run. The signed file conforms to a public standard, PAdES, so a recipient can verify it anywhere without installing anything or trusting Inksign at all. The proof travels. The key does not.
The rarer virtue is that Inksign refuses to overstate what each mark guarantees. An ink mark is called what it is, a gesture. A seal is called what it is, tamper-evident. A tool that tells you the difference is treating you as the custodian of your own consent rather than the audience for it.
This is the part that matters to a life. Signing is one of the few moments where you convert a private willingness into a permanent public fact, on purpose. It should be the most sovereign act you perform on a screen. Instead it has become the one where you are most likely to be handed the pen and quietly relieved of the key.
The Custodian holds a simple position here. A person should own the instrument that makes them permanent. If a mark can be used against you forever, the power to make that mark belongs on your machine, in your hand, answering to you.
Sign it yourself. Keep the key.