... your bootloader for a signed hash of itself and verify that the signature of the hash ...
... that is sitting all by itself. ...