device attestation

It measures conformity, not security

Volkswagen blocks GrapheneOS while admitting baseline devices. The gate measures configuration identity, not security posture.