- Emit provider-native signatures without model group prefixes in Claude responses. - Validate client-provided signatures directly and restrict signature cache recovery to omitted signatures. Closes: #4445