Short notes on attestation, confidential computing, and securing systems that ship.
Boot attestation tells you the kernel is genuine. NPU attestation should tell you the model is too — and most current designs don't.