[leni536]

> the read-only access to software will not be provided directly by the hardware, but by the same software you are trying to verify. Why not?

[dfox]

Because in the usual case you want to do such verification through same interface as normal operation, both for usability reasons and to limit number of interfaces that cross the security boundary.