I think it might be OK to document what goes in to the signature, but probably in a footnote, as it is somewhat of an implementation detail and could conceivably change.  We could then also add a caution about mtime imprecision being a particular risk on some file systems.  I wouldn't want to put such a caution in the main doc paragraphs, but in a footnote I think it would be OK.