Mod Builder should generate version, hash and signature files for newly built releases. These files can then be used by other tools to verify integrity of files.
Version file(s) can contain build date, hash and guid and perhaps some other relevant information.
Hash file(s) should contain hashes for all release files in a given bundle pack.
Signature file(s) should be PGP encrypted versions of hash files, so that tools can verify authenticity of new project releases with project specific public key.