pub fn document_hash(doc: &Attestation) -> [u8; 32]
SHA-256 of the canonical document — what signatures cover.