DocFence 0.42.0
Static package-signature coverage now requires the standard OPC relationship-transform sequence: one direct XMLDSIG Transforms list, only recognized relationship/C14N algorithms, exactly one relationship transform, and immediate C14N after it.
Both OPC C14N forms are accepted. Missing, misordered, duplicate-list, and unsupported transform sequences remain fail-closed aggregate unsupported references. This remains a static declaration audit, not XMLDSIG, certificate, or Office trust validation.