We are testing out a new experimental feature in PureBoot to extend tamper detection past /boot into the root disk. I write about the feature and my thought process behind developing it here: https://puri.sm/posts/new-pureboot-feature-scanning-root-for-tampering/