Attestation is a signed statement from the hardware about exactly what is running on it: the firmware, the code, the configuration. Because the signature comes from the chip, not from the operator, it cannot be faked by anyone with a root shell.
Modelyo checks that statement before your data is ever allowed in, and then keeps checking it — every 60 seconds. If the environment drifts from what you approved, access is withdrawn automatically and the workload is moved.
Every result you get back carries the proof: which model ran, on what data, in which verified environment. That is what "verifiable, not just promised" means in practice.
