[_factor]

Interesting idea, but the logging aspect still leaves it up to the shard holder to perform.

This essentially reduces counting to a promise.

[imperiopolis]

Programmable HSMs, with verifiable software (e.g. via a key ceremony), removes the need to trust a shard holder to do counting correctly. You know what software they're running, so you can verify it works as designed.