[yjftsjthsd-h]

> rootfs attestation verifies a per-file SHA-256 manifest at startup;

What threat model does this protect against? Certainly nice, especially for free, but wondering about utility.

[0kenx]

it's a simple integrity check for catching deployment drift/tampering.