Outline & Key Points: The Problem: Explain why self-signed SHA-256 digests fail as authentication (anyone with write access can recompute). Use the audit's finding: "integrity ≠ authentication" . The Threat Model: Briefly describe attack vectors (bundle tampering, rollback, unauthorized issuer).
Source: [Dev.to](https://dev.to/ishvan/why-sha-256-isnt-enough-for-ai-agent-governance-and-how-we-fixed-it-49nk)