KeyMint boolean tags (NO_AUTH_REQUIRED, CALLER_NONCE, etc.) use presence-based semantics: tag exists = true, tag absent = null. The .value?.boolValue approach fails on some AIDL implementations where the boolValue field isn't populated despite the tag being present, silently dropping boolean tags from attestations.