Boot-time trust starts the chain.
Runtime attestation keeps it checkable.