pub const MAX_SIGNATURES: usize = 1;
Exactly one signer is verified, so exactly one stanza is admitted. Allowing more would let a recipient append stanzas nobody checks.