clarify signature validation output and legacy handling