I would say it would be "easier" (in a way) to just back each of the "assent" phases (you agree, they confirm, you confirm) with an equivalent (automatic in-the-background) GPG signing. Then, what gets sent around is your signature of their signature of your signature of the final plaintext. :)