Really interesting work, but I'm extremely sceptical that image attestation is a good idea. Think of the privacy implications of having a unique private key tied to your device and emitted in every photo that you take. On top of that are all of the anti-consumer practises that are already enabled by hardware attestation methods that prevent us from running our own software etc.

This is a very double-edged technology.

It also suffers the usual problem of these kinds of systems in that it only works for people who are already honest and not producing fake images. The people who really want to make fakes will find a way around the system either by exploiting their hardware somehow, or just by taking a photograph of the fake image with a secured camera.

The trade-off of privacy and device ownership for an illusion of trust doesn't seem to be worth it, in my opinion.