it's a simple integrity check for catching deployment drift/tampering.