InferTrust uses device-bound cryptographic keys, append-only log structures with sequence IDs, and pre-transmission signing to make decision records tamper-evid