The signature from the Magic Envelope is enough for that scenario, because it's all from the same person.
This isn't needed, but we need to check if the sender of the Magic Envelope is the parent author (so we have a valid signature from the parent author there).