Validation of fortiOS

Hi Guys,

Just to find out anyone know how to validate the OS running in the fortigate?

This is come form auditor. they would like to know the OS running in the box is a valid OS file. Normally, we using checksum to validate the downloaded file but it cannot assure that the same file is uploaded to fortigate during upgrade process.

Anyone do have idea how to control?