Immutable check results and explicit policy-bound acknowledgements. A valid signature proves authorship; admitting hosts independently verify authority.