A source commitment is wrong; tampered image input can be refused without rebuilding bytes.
Bytes rebuilt and they do NOT hash to the signed digest.
A referenced payload was lawfully deleted. Not an alarm.
A referenced payload is gone with no prune record, or unreadable.
The log does not describe a request this code can rebuild.
Bytes rebuilt, they hash to the signed digest, and every commitment holds.