Protect test benches and prototype devices.
Early hardware cannot leave the lab without policy violation.
Oscilloscopes and analyzers authenticate to the bench root of trust.
Only approved devices can sign and flash firmware.