kas's late signature validation may allow unnoticed repository manipulations (CVE-2026-47192) | HOL Guard CVE