What exactly is being verified: hardware, key possession, software state, user action or transaction authority?

Short answer

These are different properties. Hardware-verified security may evidence possession of a protected key or a hardware-bound operation. Separately, systems may check software state, user presence or transaction-bound authority. Keyra answers must name the property actually established. A generic SIM presence check does not automatically prove legal identity or payment authorization.