Why not go with some kind of certificate chain instead?

Here’s the image… signed… here’s who signed it.

Is it for edit/changes?

Here’s an image that was edited based on an earlier image. Here’s who signed that… and it’s base images hash which can then be looked up if they decided to see what those images were?