SigDeck is a signing tool - report anything that breaks the verification guarantee (a forged signature verifying True, key material leaking into logs, timing leaks in the scrypt path).