Deploying hardware security modules (HSM/SHE) to verify RSA-3072 or Ed25519 digital signatures on application firmware before releasing core reset lines.
The immutable on-chip ROM computes a SHA-256 digest of the secondary bootloader, verifying it against public keys burned into one-time programmable (OTP) fuses.
Initializing dual-core lockstep CPUs with built-in self-test (BIST) routines, ensuring silicon integrity before handing execution to the application reset vector.