Local root checks inspect device indicators; attestation provides evidence from another trust source. Combining them into one field loses meaning.
Evaluation approach
Record source, freshness, support and verification independently, then interpret them according to business risk.
Application example
A missing local signal and an unevaluated platform result are different unknowns, neither automatically clean.
Limits and considerations
No single signal explains all device behavior or user intent.
Handling conflicting results
Sources and ages may differ. Preserve the disagreement for investigation and use additional verification where impact warrants it. A fixed clean label hides uncertainty.
Checks and decisions
- Record sources
- Separate uncertainty
- Evaluate together
Sources
The primary references above provide the technical basis. Example workflows and evaluation suggestions are this publication’s explanations, not independent test results for a particular product.