CLA dates and versions
CLAs may be versioned or are subject to change. This needs to be reflected in the check for approval, ie. the tracked 'sign date' needs to be compared to the version of the CLA.
While hashes of a .md file may work for a gitlab workflow, the paper trail may be updated more frequently while not involving new signatures.
The changes to the CLA have to be important enough to require a new signature, how can this be reflected?