Sign bytes makes a lot of sense. But you’re still on your own for how that “should” be done.
Obviously you need to build and hash the pairs and not just key values. But the order is obviously important too.
Is there some standard for this I don’t know of?