The "heart" of this system is the VBMeta structure, which contains hashes (fingerprints) for individual partitions like boot , system , and vendor .
This property is a primary indicator for security services like (formerly SafetyNet). ro.boot.vbmeta.digest
The vbmeta.digest is a hash of all VBMeta structures used during the boot process. If even a single byte in any verified partition is changed, this final digest will change. How it Works: The Bootloader Connection The "heart" of this system is the VBMeta
Apps like Google Pay or banking software check this digest. If the digest doesn't match a "known good" value from the manufacturer, the app knows the device has been modified (rooted, custom ROM, etc.) and may refuse to run. etc.) and may refuse to run.