Cryptographic integrity is not measurement integrity. An AI agent can sign a receipt for a check that never ran, measured the wrong thing, or covered only part of the claim.