feat: stage AMD SEV-SNP attestation support#703

Open

clawdbot-glitch003 wants to merge 22 commits into

Dstack-TEE:masterfrom

clawdbot-glitch003:feat/amd-sev-snp-conversion

Commits on May 26, 2026

feat: add amd sev-snp attestation support
ChrisWorkBot
committed
fix: harden sev-snp report data binding
ChrisWorkBot
committed
fix: address sev-snp draft review findings
ChrisWorkBot
committed
feat: add sev-snp verifier core
ChrisWorkBot
committed
fix: normalize sev-snp cert collateral
ChrisWorkBot
committed
fix: add fail-closed sev-snp measurement binding
ChrisWorkBot
committed
fix: recompute sev-snp launch measurement
ChrisWorkBot
committed
fix: add sev-snp boot info helper
ChrisWorkBot
committed
test: add sev-snp measurement golden vector
ChrisWorkBot
committed
fix: add sev-snp auth policy helper
ChrisWorkBot
committed

Commits on May 29, 2026

fix: bind sev-snp app id into measurement
ChrisWorkBot
committed
fix: connect sev-snp verified attestation to boot info
ChrisWorkBot
committed
fix: parse sev-snp measurement inputs from vm config
ChrisWorkBot
committed
fix: route kms snp attestation through dry-run auth
ChrisWorkBot
committed
fix: report sev-snp onboarding attestation info
ChrisWorkBot
committed
fix: use sev-snp boot info for kms self auth
ChrisWorkBot
committed
fix: make auth-simple tcb policy explicit
ChrisWorkBot
committed

Commits on Jun 1, 2026

fix: block sev-snp temp ca release
ChrisWorkBot
committed
fix: derive sev-snp tcb policy from report
ChrisWorkBot
committed
chore: satisfy sev-snp workspace clippy
ChrisWorkBot
committed

Commits on Jun 2, 2026

docs: add sev-snp review readiness note
ChrisWorkBot
committed
feat: enable guarded sev-snp key release
ChrisWorkBot
committed