Creating PDFs is straightforward; validating authenticity remains a challenge.

I write a lot of code that spits out PDFs. Invoices, lab-style reports, a certificate thing for a side project. And honestly that part is solved. You pick a lib, throw data at it, a file comes out. Done in an afternoon. Then someone forwards you a PDF and goes "is this the one we actually sent, or d