HMCA

K-Veritas signs a digest of the run so a reviewer can check the number without the data

The wrapper hashes code and output, sends only a digest out to be signed with RSA-PSS, and hands the reviewer a PDF. The cost of adopting it is a command prefix. The cost of believing it is trusting whoever holds the signing key.