It seems like this could be achieved with login.gov, if anyone wanted. It requires MFA (password + U2F/TOTP) which should be sufficient to prove who you are and that you are signing something. There’s integration docs for government services.