Cryptographic failure classes

ComputeLedger hashes the signer's public key into the payload to defeat swap-and-re-sign

A signature only binds the bytes it covers, so a receipt carrying its verifying key in the envelope can be re-signed by anybody. The authors say an internal audit forced a dedicated key-swap test before release.