Every node you rent carries a TPM-rooted attestation badge. A box claiming an H100 on a starved PCIe link cannot masquerade as the real thing — the spec is measured and forge-capped.