It would be interesting to store the Bundle.Spec.ValuesHash and the BundleDeployment.Spec.ValuesHash so we can verify that those are propagated correctly upon a new commit that changes the values.
We could also store the hash of the secret, so we can compare if the supposed hash that is stored in Bundles and BundleDeployments matches the secret.
We're facing some issues with certain customers that tend to modify helm values only in their commits.
When that happens Content resources are not updated (resources of the Bundle are the same) and only the helm values secrets and its related fields are updated.