# Attestation Boundary threat model

The evaluator assumes that the receiver deliberately pins the source lock,
accepted keys and certificate roots, evaluation time, measurement policy, and
raw evidence bytes. It verifies those inputs without network access.

It fails closed on source substitution, duplicate JSON members, floats,
unknown context or report fields, unknown result states, signature or chain
failure, changed AIR vector outcomes, changed NVIDIA report contents, and a
changed generated report.

It does not model compromised accepted roots, key theft, undisclosed verifier
defects, correlated controls, semantic dishonesty inside valid signed claims,
package substitution that retains an accepted distribution name and version,
or whether an attested platform actually caused a worldly effect. The pinned
NVIDIA RIM artifacts are retained and compared, but their signatures are not
accepted as establishing conformity for the mismatching recorded sample.
