# Device Attestation Device attestation is a signed claim about device or key state that a verifier can evaluate against an expected trust policy. ## Role in the stage model Attestation connects boot state, key provenance, device identity, enrollment, and access policy. It can report particular measured or verified properties; it does not establish legal ownership, user consent, or the legitimacy of the requesting institution. ## Evidence to preserve Preserve the attestation format, certificate chain, challenge or nonce, timestamp, claimed boot state, security patch level, device/build identifiers, verifier policy, and validation result. ## Sources - [[Index - Stages of Interception#Stage 13 — Enrollment, fleet, and enterprise authority|Stage 13]]. - Android Open Source Project, “Key and ID attestation”: https://source.android.com/docs/security/features/keystore/attestation ## Scanned_20260730-1806 overlay [[Scanned_20260730-1806#Page 16 — `Scanned_20260730-1806.pdf`, PDF page 16|PDF pages 16–17]] preserve a manual attestation baseline for a [[Moto G Stylus (2021)]]: Motorola `minsk`, Android 10/API 29, build `QPCS30.Q4-31-26-1-9`, `user/release-keys`, kernel `4.14.117-perf+`, runtime paths, and Dalvik-compatible HTTP user-agent identity. This is a useful baseline but not cryptographic proof that the live device matched stock firmware. The archive still needs verified-boot state, bootloader-lock state, security-patch level, APK hashes, signing-certificate digests, and a comparison with the matching factory package manifest. ## Scanned_20260730-1230 overlay The new notebook contributes **manufacturer-label identity**, not cryptographic attestation. PDF pages 1, 13–18, 21, 25, and 37 preserve models, serials, MACs, IMEIs/MEIDs, EIDs, ICCIDs, hardware revisions, and regulatory identifiers across Apple, Samsung, LG, Intel, and NETGEAR devices. These fields can select the correct baseline for later attestation, but they do not show secure-boot state, signer, firmware integrity, patch level, current configuration, or authorized user. See [[Device Identity]], [[Hardware Provenance]], and [[Chain of Custody]].