A revision, never a rebuild
Signing appends a revision to the file it was given, so the original bytes survive and an earlier signature stays valid. Annotations and form fields survive with them.
Why it works this way
Signet PDFSignatures a reader can verify
A standalone PHP library that signs PDF files with A1 certificates and cryptographically verifies the signatures already in them. No framework, no container, no global state.