Detached signatures used: no (illustrative policy).
Signature file/key reference: not applicable.
Signature verification: not performed.
Hash verification: not performed.
If required by context: record tool, signature file, signing identity, date and verification procedure.
Recovery limit: a digest mismatch detects change; it cannot recreate missing bytes.