An example: two files with the same visible title
Two PDFs can share a file name while containing different information. A colleague may correct a date, export the document again or change an enclosure. Keep the version that was finalised for a particular use identifiable, and associate its reference with the relevant file comparison. A later working copy should not silently replace that issued record.
When discussing integrity requirements, explain which exact files need to be checked: the main letter, each enclosure, or a combined output. Also identify who is authorised to finalise or replace them. A fingerprint comparison is useful only when the reference record is itself handled appropriately. It concerns file identity and change detection, rather than independently establishing the correctness of the wording, the sender's authority or the outcome of a physical delivery.
SHA-256 integrity, without exaggerated claims
A SHA-256 digest is a cryptographic fingerprint calculated from the exact bytes of a document. If the file changes, the digest will almost certainly change too. Epistles can retain that digest for each finalised PDF and enclosure and use it when an authorised person wants to check file integrity later. The process is useful for distinguishing an issued version from an altered copy.
A hash is not automatically a digital signature or a legal declaration of authenticity. Establishing who approved a document, when it was issued and how a delivery happened requires additional records and appropriate controls. That is why the proposed evidence system brings together file fingerprints, signed event records, trustworthy timestamps and recorded delivery information rather than showing a hash value alone.