I was too tired to investigate further last night. That is the case here, sections of data are hashed and used to create the certs:

c2pa.org/…/C2PA_Specification.html#_hard_bindings

Which means that there isn’t a way to edit the photo and have the cert match, and also no way to compress or change the file encoding without invalidating the cert.