Indeed, what I have encountered regarding provenance and digitally-signed resources is mostly in relation to confined environments, and it makes me somewhat hesitant to say that primarily provenance-based measures will scale well (notwithstanding things like the authoritative reasoning described by SOAR to combat ontology hijacking).