NPU attestation: what are we even measuring?

Boot attestation tells you the kernel is genuine. NPU attestation should tell you the model is too — and most current designs don't.