Define the signed message layout in the interface specification and test it against a second implementation. Where the protocol frames the signature separately, record how the appendix is reconstructed before verification, because a reconstruction step is where the bytes drift.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.