Signing and receipts

The coordinator signs task assignments. Provider apps verify those signatures before running assigned work.

Do not assume every model weight is hash-pinned or that every job has a provider co-signed receipt. Treat those capabilities as unavailable until the product and trust documentation state that they are live.