This solves the pre-execution side well. The complementary problem is post-delivery verification. Pre-flight checks validate "will this pipeline do what I asked?" Post-delivery verification answers "did this agent actually deliver what it promised?" Different trust boundary, same core insight: You need a contract between intent and execution. Does the manifest model extend to that kind of trust boundary?