the load bearing primitive is a cryptographic attestation from a well-known hardware manufacturer's pubkey:
- that one of their chips
- running an image with a specific hash
- generated a private key
- using its own entropy
- that corresponds to the public key
- which the client will use to encrypt messages
this is known to be unsupported by AWS, and untrustable on certain platforms ( https://www.infoq.com/news/2026/08/amd-memory-exploit/)
