You don’t have to expose the negative to the customer - convert it to unsigned at the API layer, and bobs your uncle