Encode the second part in the fixed length and assert that the unused high bits are clear. A decoder that ignores the unused bits will accept two encodings of the same value, which breaks any system that treats the signature bytes as an identifier.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.