Blog
Documenting a Multisig Ceremony: What Witnesses Should Record
A practical checklist for witnessed seed generation ceremonies in multisig treasury setups.
When a treasury initializes a multisig wallet, the ceremony produces both cryptographic keys and a custody event that auditors will ask about years later. A witnessed ceremony record bridges that gap.
What to record
Participants. Full names, roles, and organizational affiliations of every person present. Note any observers who were present but not signers.
Devices. Hardware wallet models, serial numbers, and firmware versions used during the ceremony. Photograph devices before and after initialization (with screens showing only public information).
Environment. Room location, date, time, and confirmation that no unauthorized individuals were present. For remote ceremonies, document the video platform and the identity verification method for remote participants.
Process steps. Which participant generated which key share, the order of operations, and confirmation that seed phrases were never transmitted electronically.
Storage. Description of how seed backup materials were sealed, labeled, and placed into storage containers. Photograph tamper-evident seals without capturing seed content.
What never belongs in the record
- Seed phrases or recovery words
- Private keys or key shares in any form
- Screenshots showing seed generation screens
- Photographs of paper backups with visible text
A ceremony record proves that proper procedures were followed. It does not contain the secrets themselves.
After the ceremony
Deliver the record to your custody documentation team within 48 hours while memories are fresh. Cross-reference the ceremony record with your custody ledger entry for the new wallet. Schedule a verification review within ninety days to confirm storage arrangements match the documented plan.