During boot, a PCR on the vTPM is extended with the root of this Merkle tree, and later confirmed with the KMS prior to releasing the HPKE non-public key. All subsequent reads in the root partition are checked in https://bookmarkusers.com/story18143878/little-known-facts-about-what-is-safe-ai