Comment by arboles

What prevents the provider from sending to the client an attestation of hardware state and actually running another?