4/ The on-chain program reconstructs the exact message from the intent definition proposal parameters, then verifies the ed25519 signature against it.
If anything is tampered between proposal and signing, the signature won't match and the program rejects it.