Who signed it

A report signed by the K-Veritas server shows as VERIFIED. Signed any other way, for example with --local, it shows as SELF-ATTESTED: unchanged, but anyone could have made it.

Every report K-Veritas signs is also logged publicly, so its signing can be confirmed later.