every hash chain the receipt carries is recomputed from the rows it embeds, the signed subject is rebuilt from those recomputed heads, and the ed25519 signature is checked with the key the receipt names. the verdict is a function of the bytes and nothing else.