in the course of boot, a PCR from the vTPM is extended Along with the root of the Merkle tree, and afterwards confirmed with the KMS in advance of releasing the HPKE non-public critical. All subsequent reads from the https://bookmarklayer.com/story18362285/detailed-notes-on-confidential-ai