We ttest, you act

Atestan proves who a request was intended for, and whether its content was changed.

Proving who authorized it is designed to rest on a device its holder enrolled; that part is not built.