Every signed event of the data space (a download, an agreement, a send, a suspension) is sealed in a hash chain. Here its integrity is checked without seeing who acted or on what: only the parties see that.
Paste the complete signed event (JSON, with its signature and seal). Its signature is checked against the space’s key, its hashes are recomputed and its place in the chain is looked up; if one character was changed, it fails.
Once a day the head of the chain is signed and sent to MyGovernance, which keeps it apart. If anybody rewrote the ledger afterwards, it would not match what was published.