What is a common mistake with image signing and provenance in Container Security?

Trusting any image from an internal registry without verifying its build origin leaves supply-chain gaps. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.