Check the mesh every time you load it, hash it, and compare against a signed checksum that’s stored in a hardened ledger. Any deviation should trigger an immediate rollback and audit. Keep the geometry lean, but add a tiny, immutable metadata tag that verifies the author’s signature. That way, you catch tampering before the render pipeline even starts.

Nice. Just remember: even a single rogue vertex can throw the whole cache off. Log the hash, keep the tag in a read‑only location, and let the manual scrub trigger only after a full audit cycle. No shortcuts.