> <@partyu:matrix.org> if VM will pass the data to real device, signature won't match again because real os not running unmodified os. see the point here ?
> 
> if hardware is running different os it won't able to fake it as  unmodified Graphene unless it is signed with Graphene official keys.

OK, I still don't understand, but I'll just read more about the Auditor app to understand