One would think this problem could be easily resolved with carriers publishing version numbers and checksums.

I don't feel like this would be an unreasonable request, and possibly something that should be mandated by law.