The controller still mints each covered account and hands it to the vault (ADR 0374); ADR 0547 clause 9 has the vault write the bcrypt hash of what it holds into its own state, readable by the grants part, and say account-hashed. It hashes on keep, at start every held account with no key of its generation, and again by hand (account_hash); a refused write is owed and written at the next pass. secret_own says per bus account whether this generation's hash is written. Issue: 1945