Аннотация
Current assurance practices for smartphone trusted computing bases (TCBs) remain fragmented, poorly traceable, and difficult to reproduce across heterogeneous vendor ecosystems and rapidly evolving firmware environments.Existing frameworks such as remote attestation (RATS/EAT), goal structuring notation (GSN), and supply-chain security mechanisms (SBOM/SLSA) provide valuable