Great question — answering as the UphillTech team:
When the kernel performs hibernation it writes the special signature into the device header. When a resume is requested, the kernel checks for a valid signature and will refuse to resume from this device if the signature is not present. The signature is immediately cleared after the check and also if hibernation was not successful . As long as you ensure that a resume is attempted on every boot this protects against a stale image. You are correct that resume is synchronous. If execution reaches the code after echo N:M > /sys/power/resume it means that the resume attempt failed. Otherwise there is no verification that the hibernation image matches the currently booting system. It is also...
Full answer by Andrei Borzenkov: https://unix.stackexchange.com/a/806912 (CC BY-SA 4.0).
Need it done for your business? UphillTech.