assertTrue(preauthService.validatePreauthIntegrity(sessionId, expectedHash));

        // Validation should fail with incorrect hash
        byte[] incorrectHash = new byte[expectedHash.length];
        secureRandom.nextBytes(incorrectHash);

        assertThrows(CIFSException.class, () -> {
            preauthService.validatePreauthIntegrity(sessionId, incorrectHash);
        });
    }

     * @param expectedHash the expected final hash
     * @return true if validation passes
     * @throws CIFSException if validation fails
     */
    public boolean validatePreauthIntegrity(String sessionId, byte[] expectedHash) throws CIFSException {
        PreauthIntegrityContext context = sessionContexts.get(sessionId);
        if (context == null) {
            if (enforceIntegrity) {