/usr/lib/systemd/systemd-veritysetup
systemd-veritysetup@.service is a service responsible for setting up integrity protection (verity) block devices. It should be instantiated for each device that requires integrity protection.
At early boot and when the system manager configuration is reloaded kernel command line configuration for integrity protected block devices is translated into systemd-veritysetup@.service units by systemd-veritysetup-generator(8).
systemd(1), systemd-veritysetup-generator(8), veritysetup(8)