Real minisign signatures store line 3 as "trusted comment: <comment>", so both signer implementations now strip exactly that prefix and fail closed when it is absent. The fake signer now emits the real four-line format. Previously it wrote an unprefixed line 3, which masked the real-format failure in parse_trusted_comment and the publisher verification path.