Physical and side-channel attacks are excluded

The paper's guarantee assumes trusted TDX, CPU and H100 hardware. It treats side-channel defenses as orthogonal and excludes physical attacks, including memory-bus interposition and GPU replacement ¹. These adversaries are outside the stated guarantee.