It is the NXT core that would be verifying the plugin. Not sure if that makes any difference. Evil Bob's script processor has to generate the same output or it will get ignored by peers since the AM data from the script is wrong if changed.
The Nxt core can be modified James - wake up (or perhaps instead "take a nap")!
You do realise that some nodes are running different versions of the NRS right now don't you?
And you do also realise that any reporting their version as x.x.x could simply be lying don't you?
I agree about sleep.
I understand Evil bob could be everywhere.
Here is a hypthetical. Lets say there was a library that implemented indistinguishability obfuscator in a fast enough and compact enough way. With that as a given, would it be possible to verify the correct version is running?