It works by performing key attestation and setting the system property ro.boot.vbmeta.digest to the verified boot hash result. I welcome contributions to improve this tool! If you'd like to contribute ...