System-Level Security Verification Starts with the Hardware Root of Trust