Every amount stored as a positive magnitude
The ledger is append-only and stores each amount as a positive number, with the meaning of the sign carried by the type field. Rollups then cannot produce a sign-convention bug, because there are no negative numbers in the store to invert.