`sandbox demo` and `sandbox confidential` detect no device and run no
unit, yet the attestations they seal named a CPU model, a GPU product
with a driver release, and a confidential-compute CPU product: device
identities no probe saw, sealed as if detected.
Each identity is now a capability-named placeholder labelled
illustrative ("illustrative host CPU (none detected)", driver
"illustrative"), built by illustrative_identity beside the existing
illustrative() energy records. The module docs say so.
Test: the_illustrative_runs_seal_no_detected_identity fails on the old
reports (demo: model "Generic x86_64") and passes now.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
3f7a5c1755