The signed record we didn't have in March

Two March attacks had the same shape — CI ran code it shouldn't have, with credentials it shouldn't have had, and nobody could prove what executed. That's the gap CI/lock closes.