@hayatofujii Yes, to *any* OS, because those changes can only happen from the paired RecoveryOS to a given OS and System RecoveryOS isn't paired to anything.
However, non-1TR boot of paired RecoveryOS is also unable to change startup security settings, so that is not an infallible sign that you're in srOS.
@marcan Thanks for the information. I think I did it right: my srOS has an option to clean install of Ventura. macOS paired recoveryOS does offer Sonoma. I run a 14.0 install.
Updating to 14.1 right now.
Edit: no dice, the installed srOS is good.