A key-handle whose public_key/1 returns key A but whose sign/2 signs with a DIFFERENT key B (a rotation/misconfiguration race). Cross-vendor round 2 should-fix finding: the adapter validated only 64-byte length, not that the signature verifies against the resolved public key. The adapter now verifies the signature against the public key -> :signing_failed.