The local signing key protects integrity after collection. It does not prove that provider observations are true.