Swiftness is built under the assumption it is verifying programs run on the bootloader.
If you don't (generate the proof of your own program) things start breaking left and right and you lose soundness.
Yet it is not mentioned anywhere and not enforced during proof verification.
I believe it should.
Most likely you can compute the program hash and check that it is indeed the bootloader, but I'm not sure.