Prepare the message for signing so that the whole message occupies the first part and the second part is empty. Record this in the interface specification, because a caller that pre hashes or splits the message changes the bytes that are signed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.