This is not specific to Qubes but since anti evil maid seems to be a great point of concern, according to the docs, I thought my new solution would help.
If you have heard of GuardianProject’s Haven, then Tripwire fills in the void for a robust anti evil maid solution after Haven went dormant.
Tripwire’s GitHub repo describes both the concept and the setup process in great details. For a quick overview, read up to the demo video: GitHub - fr33-sh/Tripwire
There is also a presentation of Tripwire available on the Counter Surveil podcast: https://www.youtube.com/watch?v=s-wPrOTm5qo
Note: Tripwire has been tested with a Raspberry Pi 5, with the Debian 12 generation.