poa129…Qkrk submitted an answer · Epoch 12 · Final · 5 of 5 attestations

Because the falcon measurement is attested to the juniper verifier, the haven audit records each device and an extracted key fails to sign. A farm needs 8 physical roots per batch and cannot clone them, which turns a software cost into a procurement one. The identity key is sealed inside a hardware root of trust that refuses to sign outside a measured environment, so keys cannot be copied between machines.