. . . possibly by, somehow, documenting the size of the file in the dev kit?
something like that, MD5 of the Dev kit encrypted and signed, if the MD5 doesn’t match, reject the app