Electronic signatures
Signed against the record, not against a screen.
The dialog states what is being signed before it will accept a PIN — recipe, run start, run end, and the verdict being attested — and records the meaning of the signature and a reason alongside it. The signature is CMS/PKCS#7 with ECDSA P-256, bound to that exact record, and the signer, meaning and UTC time go into the audit trail.
Proves the signer sees exactly what they are attesting to