AI model signing proves a model wasn't tampered with. Here's why it still can't tell you who trained it or whether they were allowed to.