fix: address signature-backend warning and module version drift

djm81 · djm81 · commit cce4cf74141c · 2026-02-24T08:31:00.000+01:00
diff --git a/src/specfact_cli/modules/analyze/module-package.yaml b/src/specfact_cli/modules/analyze/module-package.yaml
@@ -1,5 +1,5 @@
 name: analyze
-version: 0.37.1
+version: 0.37.2
 commands:
   - analyze
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Analyze codebase quality, contracts, and architecture signals.
 license: Apache-2.0
 integrity:
-  checksum: sha256:81401deb9416cb772437ab806dbc377778f7cf4d2986e8169765de59d1708733
-  signature: YfTBJOyF5OxkRkIg5Fffqtbc3DHa/eXoewyav97FwEMRZoqRXH6Fhhu80UUjKPEYMWP5JzRU8dWgvi8FgfFqBQ==
+  checksum: sha256:8f0919570eb25f9643f3f4557f40d8137c4754e4422ff71bdbb7ed2aa04e4bff
+  signature: 6sTJRGUeApach2vdwQJubd3bHaJm2bu7b46DnUFJGAZ95X6dLMCyuCWVdxTRA6kX3YHblYZD8SfFwAPPsl1KAg==
diff --git a/src/specfact_cli/modules/auth/module-package.yaml b/src/specfact_cli/modules/auth/module-package.yaml
@@ -1,5 +1,5 @@
 name: auth
-version: 0.37.1
+version: 0.37.2
 commands:
   - auth
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Authenticate SpecFact with supported DevOps providers.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d085de940d5de887f858462eff10a75e5acdb2e31cc61ed7dc79bfe6e4527e76
-  signature: SyoiHxZHlmQLzdnqn45c8B/dzZuqyWzflAo/hf0PWsckPSfeGN6ytlGgTJPV8Rq8IG96aVnPkir2dEJ4gavxAQ==
+  checksum: sha256:fd0c9ff643c73a25c229e5925b58446ff25af7ec5ab4412d3eff9704b4cc10c1
+  signature: 4KKwmf58+3boa+2jMF9m2NvjGcXB6Jdjfu0C6MV5Io+XjF6FUPyOmf7iz2xH9afgTTeVLVdc7X5EjJJGm5tMAQ==
diff --git a/src/specfact_cli/modules/backlog/module-package.yaml b/src/specfact_cli/modules/backlog/module-package.yaml
@@ -1,5 +1,5 @@
 name: backlog
-version: 0.37.1
+version: 0.37.2
 commands:
   - backlog
 command_help:
@@ -28,5 +28,5 @@ publisher:
 description: Manage backlog ceremonies, refinement, and dependency insights.
 license: Apache-2.0
 integrity:
-  checksum: sha256:db36a40672119b436b50bd4142400feec3398ae2732cfa357eacb7b40d8b8582
-  signature: NXgVtRf+ubB+upfAacJUTX8yaGw/cdZa9SSxqusak3ijGZe5POtK+ud+n2lnVMCg/9pOzoq8wdgsTrVr3mkCDA==
+  checksum: sha256:6d31c481c40241a744ffa255d29bcf834e5715de310f58f7ebc74e19f1e4fd8d
+  signature: 20mO8sayOcVV992iqYROkQL/Q7jxjJE3re1fWYbTLIW7HPskNg1CROpCnaeUv9dr629qPMs/YVlzadMl317VDw==
diff --git a/src/specfact_cli/modules/contract/module-package.yaml b/src/specfact_cli/modules/contract/module-package.yaml
@@ -1,5 +1,5 @@
 name: contract
-version: 0.37.1
+version: 0.37.2
 commands:
   - contract
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Validate and manage API contracts for project bundles.
 license: Apache-2.0
 integrity:
-  checksum: sha256:577b9ee6af8075c0ebf58665a50ec5be6b2de935f401454f831447905320b649
-  signature: gHyTzZkYnLDxf27XFNHH/pauUhZ5ZZfTwPNQBwWCZ/v4oEdDV8gGjDr84g2KSsH8myrE7J8q47iBChxqO+FjBw==
+  checksum: sha256:5cc204c3bab58765f19862a6fe2127ddb0b6f0b56422bfc078d69beb91398f0d
+  signature: URMN7NMTIsPqZmtcDW4onpaH1Up4kpZaE49iyb3jaqN4x2KuEGDyU4uudhzu/4Pu1DObWu20c+aVfwtj26LbCQ==
diff --git a/src/specfact_cli/modules/drift/module-package.yaml b/src/specfact_cli/modules/drift/module-package.yaml
@@ -1,5 +1,5 @@
 name: drift
-version: 0.37.1
+version: 0.37.2
 commands:
   - drift
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Detect and report drift between code, plans, and specs.
 license: Apache-2.0
 integrity:
-  checksum: sha256:5bf84d0a840bbdb47ccacda4490d19685d1298c3f7fd3b8e48ca641a08727e08
-  signature: S8djuQsc+7LBZH8myx+aUNeSfSpnLHXL70iCrK9yCfyYJbqDklQpKNxBGJQ4DjzrApm6ZyTBoxZdmA1BxDvDBw==
+  checksum: sha256:368d6beaf1b4356741c1dbdd8125800e466abb47d8a18e14e2c0f9c66c94397b
+  signature: +gU8OTtpxWqIKTk2xoL4Msed1alxTk4soy/HYG4wJuOcwQgaxG7tM/WEWTRMCXHTN4kCiN+3Wqp975FUtW0UDw==
diff --git a/src/specfact_cli/modules/enforce/module-package.yaml b/src/specfact_cli/modules/enforce/module-package.yaml
@@ -1,5 +1,5 @@
 name: enforce
-version: 0.37.1
+version: 0.37.2
 commands:
   - enforce
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Apply governance policies and quality gates to bundles.
 license: Apache-2.0
 integrity:
-  checksum: sha256:16a8bc8d027b175321696f01fceb40a3cbc4a0567fe165c560be94221e412f88
-  signature: OuAE5iZ7AxSsD6VDfm5YKCtxQLJ33i4ACEW/5ejiWY0wlsgQtpkf2CMZaXWUBvS9GvxhID6PS3+yJMgzAaHBAA==
+  checksum: sha256:e93b26c59b548af9cc3230b18eb37aff8c3dc85132fed7457f19bdaaaef1e8a0
+  signature: TcjUHtOLqZ3TNlUB8cq1gwUJY1qjzQ1z6mh8nokMLp+svvaGVJc6zlkcYTN8InmiCnrUoevfUutuDZvN2gGSDg==
diff --git a/src/specfact_cli/modules/generate/module-package.yaml b/src/specfact_cli/modules/generate/module-package.yaml
@@ -1,5 +1,5 @@
 name: generate
-version: 0.37.1
+version: 0.37.2
 commands:
   - generate
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Generate implementation artifacts from plans and SDD.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d9dd799f0a13dc07d2200fdfbe5a4ce3cf869c2737d08f4101cebf3d4ff983fd
-  signature: 7IWVqUEAcD06JdiOinxBUQYp1coH81AecR0KXBQiy+O4XWg9/zI9YQVwWurXWozsSgCBeT/D4HOQ4bxOvrw3DQ==
+  checksum: sha256:16e7312d299e4c1c4ceedea2fdcead13ffd81e795e810fbd6ffabb5d0352d744
+  signature: mkgqkfF8n6gix2oAlV62FJEwIJfZ0ruiiMLcV5KmiH5v9OmuuHFK4NPZxC7nBbRXWoTz2jPD0uEnsU+DIakbCg==
diff --git a/src/specfact_cli/modules/import_cmd/module-package.yaml b/src/specfact_cli/modules/import_cmd/module-package.yaml
@@ -1,5 +1,5 @@
 name: import_cmd
-version: 0.37.1
+version: 0.37.2
 commands:
   - import
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Import projects and requirements from code and external tools.
 license: Apache-2.0
 integrity:
-  checksum: sha256:290a3dbe86dce079ed7cde343893830725ff80068fa89a8d0b0fd935bb746dfa
-  signature: ITiHkBu+zHOChLHGlXh3IQakaHxcFasY+ifLkWhbY9J8/d7hb3fEMz3t0IB3F3/VXi+dvsQdPhxha+baAVpvAA==
+  checksum: sha256:ed7387b3bc4de4fc6e320b976f180befe49961669c337257851de7da385d9ca4
+  signature: j2HV/fWLN7nzmTzWseUIPNv+E0gw5Pif4+a8c6Qe8eHimUxnx6OAauLV9HgawdW9GG52YkDIwpTOkAZ6BBLCBg==
diff --git a/src/specfact_cli/modules/init/module-package.yaml b/src/specfact_cli/modules/init/module-package.yaml
@@ -1,5 +1,5 @@
 name: init
-version: 0.37.1
+version: 0.37.2
 commands:
   - init
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Initialize SpecFact workspace and bootstrap local configuration.
 license: Apache-2.0
 integrity:
-  checksum: sha256:e6d6cdf1c10a6a760388db5a66e0f666f93b0835dfff1c3db13b19f8da9bce13
-  signature: IvGAdhMfLOyArra2PKdxqN0ozHw6m4gvZh0sEjiLSWx/2hiDDSXHSy6uHx4hEx0868bhknE6mvyUAAL3PZ4XCg==
+  checksum: sha256:38a3261dd947f5827b1a67b34970c0ab81c13de6d2657d7cf5af694da6da8436
+  signature: khTbNy9iE3eXBNWo0+/Cb2B533U1PrLLNKtPnRiJPKNCQTrlfxhWvG+GEcnnFUinSTnfsjY9Of5GJYOuhJyACA==
diff --git a/src/specfact_cli/modules/migrate/module-package.yaml b/src/specfact_cli/modules/migrate/module-package.yaml
@@ -1,5 +1,5 @@
 name: migrate
-version: 0.37.1
+version: 0.37.2
 commands:
   - migrate
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Migrate project bundles across supported structure versions.
 license: Apache-2.0
 integrity:
-  checksum: sha256:3e2b5ea6a71f3917dbec01c92739e5280ff51163b8c64a60e757c33e5a334e6d
-  signature: 0USQ8OTre4Czs0lMzK2Oa2q2CwquGwPdLKnpVNZmSh9ytdiQqG2fx0BvdqDFi460gxx0sxOKAiWDJ+0/coKBBw==
+  checksum: sha256:365f469ff6b6fe9f80cb1cf078adf4da7acceed04c5d18b3a0b37b8c1e58547b
+  signature: APKTWd9UPlnBk4ypohLr3qernnOqIWO0sn7ABgozdD62tTqWnZe5lYRk1xJzXFRxCqO+aL+6/Xdcl8M72OfABw==
diff --git a/src/specfact_cli/modules/module_registry/module-package.yaml b/src/specfact_cli/modules/module_registry/module-package.yaml
@@ -1,5 +1,5 @@
 name: module-registry
-version: 0.37.1
+version: 0.37.2
 commands:
   - module
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: 'Manage modules: search, list, show, install, and upgrade.'
 license: Apache-2.0
 integrity:
-  checksum: sha256:71f9c1bc5ae79c2a234920b5dcb1be415b4b2255de5827786344280320291629
-  signature: rNpk992cIrwe9BATaH26EPTVgkj1W1ZJcYnAnOikYqGAPxr+f2xprf4kAvHMym2naI0N+P1fjbT8ZnpP2zenCw==
+  checksum: sha256:ce1d40c3c62dcd8d15181ff263811a6c28a88070dd672fba74e09eea64a830e6
+  signature: TIK6aQt7hyoxM11M8XYByKP7s9DlK7+F1h0mVxCRuQyznTV0Pq8c56XD7if+GhBFptqPB94NwQ36rPdjqOCSDw==
diff --git a/src/specfact_cli/modules/patch_mode/module-package.yaml b/src/specfact_cli/modules/patch_mode/module-package.yaml
@@ -1,5 +1,5 @@
 name: patch-mode
-version: 0.37.1
+version: 0.37.2
 commands:
   - patch
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Prepare, review, and apply structured repository patches safely.
 license: Apache-2.0
 integrity:
-  checksum: sha256:05cb624a43ac45da4a467e1a990b8ceb378a7f5d9a1d4edbf583198a8d9bc73b
-  signature: txeDUarIvALJFnaZVWky9OjJ04m9yHPnuKrA4MzOSZaOwaq9OqfLn10dPFwENveOkJ09MErBycS3QaeD8UL6AQ==
+  checksum: sha256:afc1985b0a9385055acf7efdf20d314198429bfdbf33a68bfbe8f8add0476456
+  signature: qcy6s/cQQ2WKo1wGB+PmAKyTcuWl+JmfHs4afP06420raW9mKV5fuuSTABcYH8V9hblyeloHV+I9YuwieDZhBg==
diff --git a/src/specfact_cli/modules/plan/module-package.yaml b/src/specfact_cli/modules/plan/module-package.yaml
@@ -1,5 +1,5 @@
 name: plan
-version: 0.37.1
+version: 0.37.2
 commands:
   - plan
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Create and manage implementation plans for project execution.
 license: Apache-2.0
 integrity:
-  checksum: sha256:5e2ccf7212f590f19e6b68e0a6a90e6f72e1bebd28d570f1005cf3fbe320663a
-  signature: QQxUVU+cB2XP9rs5VsYdANzrr9S5Y4VKu5B0PY+h+wx3F7mdfLsyg9xzQj4mgDeby3/XIjXQC4jywNqoqErtDg==
+  checksum: sha256:60f6ea69f2178bb8395ab19743318849b2caea1aad9a880d230da5c87236fd3e
+  signature: luy557R50WTq4gvm3Equ5SV1RMDJOs+szawTwEpgl8eGTuuDd24Nxakb9erW7qzbV5Cn0COsZffUfKvNzH4jBw==
diff --git a/src/specfact_cli/modules/policy_engine/module-package.yaml b/src/specfact_cli/modules/policy_engine/module-package.yaml
@@ -1,5 +1,5 @@
 name: policy-engine
-version: 0.37.1
+version: 0.37.2
 commands:
   - policy
 command_help:
@@ -19,8 +19,8 @@ publisher:
   url: https://github.com/nold-ai/specfact-cli-modules
   email: oss@nold.ai
 integrity:
-  checksum: sha256:88003e837e99353e8c1a5df988c296c784097c6d4c81fcf0b195c610adc6ab2a
-  signature: mGxDYiHVqmH+Iy9Ekzw9fS6cYS41W/O/eQyc75kg8PMj1FF1kWlCIRTkuE9TTHLmdD3ePz4cwGX5+PbkVioWAQ==
+  checksum: sha256:a239acb53ba59ca7d1f1063c90d60037a2501813d074aae0a4c4590b70a34648
+  signature: lG2M7QVkbaomLebkqLH3rRi64YCDGiABkaZfxl8082TSGfIcZ9K0gPXgNeEQZIKVZcVM9UnJe7NZ/fiQXr/JAw==
 dependencies: []
 description: Run policy evaluations with recommendation and compliance outputs.
 license: Apache-2.0
diff --git a/src/specfact_cli/modules/project/module-package.yaml b/src/specfact_cli/modules/project/module-package.yaml
@@ -1,5 +1,5 @@
 name: project
-version: 0.37.1
+version: 0.37.2
 commands:
   - project
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Manage project bundles, contexts, and lifecycle workflows.
 license: Apache-2.0
 integrity:
-  checksum: sha256:130e53a4266f90a6236d892c513692641e6675387bf7a63c8ac51871a27494eb
-  signature: Nu1HNs0tAWUzLrXcHWpUWqpxsq68uYgBZWcR34nmH7iGdejEvBRh7zIC/Gx7G0nQBdVbfc4rtZEvJx55CT38CA==
+  checksum: sha256:80789cfb916a67bbbcd2c9416ebae21fe79affb60596d0bc218777c6652cf5d7
+  signature: RI2XsxN5BBurAWYlAAYm4amcCWsJ/McnJUqSua/2mDGx/KW7WoXVaMD4xccCatjTDqL6Lr7ctkVh4iQ6wTqoDg==
diff --git a/src/specfact_cli/modules/repro/module-package.yaml b/src/specfact_cli/modules/repro/module-package.yaml
@@ -1,5 +1,5 @@
 name: repro
-version: 0.37.1
+version: 0.37.2
 commands:
   - repro
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Run reproducible validation and diagnostics workflows end-to-end.
 license: Apache-2.0
 integrity:
-  checksum: sha256:9167dc7b6d87478d39b5597262cd36e491b62e38253f6bd984f83ecaf5c6a36c
-  signature: DeyWsQRqOQsqlevDAZVMl9GO8K8JxCnbRddH5rhuJCQKIaLQ/gVilYklpzfK6hGota5tUi9zs88gFMFrBN1jCw==
+  checksum: sha256:c319deb6f08acc010d14202ed0d643309b24aaa5399f1c235dd44a388df16ca1
+  signature: rk3tPivhE4DLpxNZ7pSodnehc9VwmDBoVp5+7RYcNFQ/vNXeTJ++fiXU1lI6rHHIEf2MZEPqMcZ2UpCkOKBwAg==
diff --git a/src/specfact_cli/modules/sdd/module-package.yaml b/src/specfact_cli/modules/sdd/module-package.yaml
@@ -1,5 +1,5 @@
 name: sdd
-version: 0.37.1
+version: 0.37.2
 commands:
   - sdd
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Create and validate Spec-Driven Development manifests and mappings.
 license: Apache-2.0
 integrity:
-  checksum: sha256:91e50b4ba782527c1bd5acd60ff9b492cbbb51acb510e2253466af17598b0109
-  signature: 2ZsXXuUgxbkK/cvAyyOooe/rLeUocQaxG4EkV5A+qgQL9k8WLEZnRpfcleSza6nMqMPjWJ9zgi1ksh4JZu0eBA==
+  checksum: sha256:13fba474517e8c1d74e4972b0d232b074a0b20a2f1860cb2b935f3cf000a682f
+  signature: NCuP7ytnX9XbWdlqFCaerqOsRzOiv7atY/w/ibIngAJGpFCelBwLnbf4qGHqMP10oJCAQh2oWV/13mAm6IYpCw==
diff --git a/src/specfact_cli/modules/spec/module-package.yaml b/src/specfact_cli/modules/spec/module-package.yaml
@@ -1,5 +1,5 @@
 name: spec
-version: 0.37.1
+version: 0.37.2
 commands:
   - spec
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Integrate and run API specification and contract checks.
 license: Apache-2.0
 integrity:
-  checksum: sha256:25ee99befd2371e1f3fcc8548883d0e7c73bd9f80e4362dd14280654246b22f0
-  signature: QeyKrrHL4X4qL6ZjR9x5z80pBmRIJBa/SSchgs025/t/deaDbm+tqIykWTN7X7v5xPCY1ddA75kimGpddbBzAA==
+  checksum: sha256:9f94350b959ab97fbb309ecdd0aaaf52137ae7cbae16b66078fde7d38406f39c
+  signature: +UoWzNOY5pHJzrff3Rt85xnXhae/Tbsxhv4e5oH+siIIcdTjp+8qK9ZESAsT44YgqufcjiRoTi/Ld6z8s675CQ==
diff --git a/src/specfact_cli/modules/sync/module-package.yaml b/src/specfact_cli/modules/sync/module-package.yaml
@@ -1,5 +1,5 @@
 name: sync
-version: 0.37.1
+version: 0.37.2
 commands:
   - sync
 command_help:
@@ -18,5 +18,5 @@ publisher:
 description: Synchronize repository state with connected external systems.
 license: Apache-2.0
 integrity:
-  checksum: sha256:7e70d5256aba0bcca3dbed4f6e777453b16cd03b463d49738f07e554b7bdab96
-  signature: mqaNTclocVTrfrImqoryxSr5BhUPbqZS+6C2jCeLThaTMmSwlzkDB9OPQvDcHatdInWW/YQ1x/iaxdj56Gi+CQ==
+  checksum: sha256:6fcd7b3d1276c318b6ca94f61df056ebff42ec5d4c6770e5b5c7c396dccdf156
+  signature: 6/DQ1LgbzysUep7niPIK9iW/AYd0g4/152yEu0qksuLhPMtC88ghMTgcho1ooBQZjvYuA/T2wOVUcv5Y+UsLBw==
diff --git a/src/specfact_cli/modules/upgrade/module-package.yaml b/src/specfact_cli/modules/upgrade/module-package.yaml
@@ -1,5 +1,5 @@
 name: upgrade
-version: 0.37.1
+version: 0.37.2
 commands:
   - upgrade
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Check and apply SpecFact CLI version upgrades.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d8c5f2fb4ed4c252701c07125cba0587262700b6738740ef1c8c174611cc5c3b
-  signature: MDFyw5rJ3GBJ+PVMEwCMHsqtiItxryM4XpKm/h+M4bxJKFRHDww5i8Uzpl1MDBucnpW6KGoMeo7GNKgQjeHxBA==
+  checksum: sha256:c4dd29c7289f946a56e00a9dc408a0d56708fc39a89cd8fd5fddaadb1a56dec5
+  signature: 4aNspYwRcNWBnwn3p8tJUfG2BA4ZaXvRNczvjDQXTR/U/SChgMQ0e8B72ujYh0XCLFZLWCW+/kj/w2Y+N8vjCw==
diff --git a/src/specfact_cli/modules/validate/module-package.yaml b/src/specfact_cli/modules/validate/module-package.yaml
@@ -1,5 +1,5 @@
 name: validate
-version: 0.37.1
+version: 0.37.2
 commands:
   - validate
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Run schema, contract, and workflow validation suites.
 license: Apache-2.0
 integrity:
-  checksum: sha256:cec0b0ed07a1bfb596c4ff0d0e80422b8a28c76d17cf358110550b594a132932
-  signature: wDHd+UXbv7luqntwGsRKf4eDRIxDr97hk1avCYHR88TyhGHjZglmzAeFQuDBR4Dx5BLSCl8WKFT8Vh6y/wquDg==
+  checksum: sha256:b1f954e5fef7f8b964299aec54f75b3b24ebc50c24b90db8598fc4b3d8532ee1
+  signature: +1azi81aZmGaQxiu4i9gcemRTPyBthDiwP+VWEeK9AGTcTPHjz/meuY3GsO8c33SBVsNltZ3PEggQpw7h8kDCw==
diff --git a/src/specfact_cli/registry/module_installer.py b/src/specfact_cli/registry/module_installer.py
@@ -7,6 +7,7 @@
 import shutil
 import tarfile
 import tempfile
+from functools import lru_cache
 from pathlib import Path
 
 import yaml
@@ -27,7 +28,6 @@
 MARKETPLACE_MODULES_ROOT = Path.home() / ".specfact" / "marketplace-modules"
 _IGNORED_MODULE_DIR_NAMES = {"__pycache__", ".pytest_cache", ".mypy_cache", ".ruff_cache", "logs"}
 _IGNORED_MODULE_FILE_SUFFIXES = {".pyc", ".pyo"}
-_SIGNATURE_BACKEND_WARNING_EMITTED = False
 
 
 @beartype
@@ -164,6 +164,15 @@ def _is_signature_backend_unavailable(error: ValueError) -> bool:
     )
 
 
+@lru_cache(maxsize=8)
+def _warn_signature_backend_unavailable_once(error_message: str) -> None:
+    """Emit signature-backend-unavailable warning at most once per distinct message."""
+    get_bridge_logger(__name__).warning(
+        "Module signature backend unavailable (%s). Falling back to checksum-only verification.",
+        error_message,
+    )
+
+
 @beartype
 def install_bundled_module(
     module_name: str,
@@ -337,7 +346,6 @@ def verify_module_artifact(
             return False
 
     if meta.integrity.signature:
-        global _SIGNATURE_BACKEND_WARNING_EMITTED
         key_material = _load_public_key_pem(public_key_pem)
         if not key_material:
             if require_signature and not allow_unsigned:
@@ -354,12 +362,7 @@ def verify_module_artifact(
                 if require_signature and not allow_unsigned:
                     logger.warning("Module %s: signature is required but backend is unavailable", meta.name)
                     return False
-                if not _SIGNATURE_BACKEND_WARNING_EMITTED:
-                    logger.warning(
-                        "Module signature backend unavailable (%s). Falling back to checksum-only verification.",
-                        exc,
-                    )
-                    _SIGNATURE_BACKEND_WARNING_EMITTED = True
+                _warn_signature_backend_unavailable_once(str(exc))
                 return True
             logger.warning("Module %s: Signature check failed: %s", meta.name, exc)
             return False
diff --git a/tests/unit/registry/test_module_installer.py b/tests/unit/registry/test_module_installer.py
@@ -271,11 +271,9 @@ def test_verify_module_artifact_falls_back_when_signature_backend_unavailable(
             ValueError("Signature verification backend unavailable: No module named '_cffi_backend'")
         ),
     )
-    monkeypatch.setattr(module_installer, "_SIGNATURE_BACKEND_WARNING_EMITTED", False)
     caplog.set_level("WARNING")
 
     assert module_installer.verify_module_artifact(module_dir, metadata, allow_unsigned=False) is True
-    assert module_installer._SIGNATURE_BACKEND_WARNING_EMITTED is True
 
 
 def test_verify_module_artifact_fails_if_signature_required_and_backend_unavailable(
@@ -304,7 +302,6 @@ def test_verify_module_artifact_fails_if_signature_required_and_backend_unavaila
             ValueError("Signature verification backend unavailable: No module named '_cffi_backend'")
         ),
     )
-    monkeypatch.setattr(module_installer, "_SIGNATURE_BACKEND_WARNING_EMITTED", False)
     caplog.set_level("WARNING")
 
     assert (
@@ -316,7 +313,6 @@ def test_verify_module_artifact_fails_if_signature_required_and_backend_unavaila
         )
         is False
     )
-    assert module_installer._SIGNATURE_BACKEND_WARNING_EMITTED is False
 
 
 def test_uninstall_module_falls_back_to_legacy_marketplace_root(tmp_path: Path, monkeypatch) -> None:
