Issuer identity is a separate problem
Verification proves the holder of key K signed this — not that K is the real Atlas. The forgery probe catches the wrong key, but name-squatting and Sybil issuers need a key directory, web-of-trust, or on-chain anchor. The signature alone does not solve trust.