feat: stage AMD SEV-SNP attestation support#703

Open

clawdbot-glitch003 wants to merge 33 commits into

Dstack-TEE:masterfrom

clawdbot-glitch003:feat/amd-sev-snp-conversion

Commits on May 26, 2026

feat: add amd sev-snp attestation support
ChrisWorkBot
committed
fix: harden sev-snp report data binding
ChrisWorkBot
committed
fix: address sev-snp draft review findings
ChrisWorkBot
committed
feat: add sev-snp verifier core
ChrisWorkBot
committed
fix: normalize sev-snp cert collateral
ChrisWorkBot
committed
fix: add fail-closed sev-snp measurement binding
ChrisWorkBot
committed
fix: recompute sev-snp launch measurement
ChrisWorkBot
committed
fix: add sev-snp boot info helper
ChrisWorkBot
committed
test: add sev-snp measurement golden vector
ChrisWorkBot
committed
fix: add sev-snp auth policy helper
ChrisWorkBot
committed

Commits on May 29, 2026

fix: bind sev-snp app id into measurement
ChrisWorkBot
committed
fix: connect sev-snp verified attestation to boot info
ChrisWorkBot
committed
fix: parse sev-snp measurement inputs from vm config
ChrisWorkBot
committed
fix: route kms snp attestation through dry-run auth
ChrisWorkBot
committed
fix: report sev-snp onboarding attestation info
ChrisWorkBot
committed
fix: use sev-snp boot info for kms self auth
ChrisWorkBot
committed
fix: make auth-simple tcb policy explicit
ChrisWorkBot
committed

Commits on Jun 1, 2026

fix: block sev-snp temp ca release
ChrisWorkBot
committed
fix: derive sev-snp tcb policy from report
ChrisWorkBot
committed
chore: satisfy sev-snp workspace clippy
ChrisWorkBot
committed

Commits on Jun 2, 2026

docs: add sev-snp review readiness note
ChrisWorkBot
committed
feat: enable guarded sev-snp key release
ChrisWorkBot
committed

Commits on Jun 3, 2026

fix: bind sev-snp vm launch inputs
ChrisWorkBot
committed
fix: complete sev-snp key release smoke path
ChrisWorkBot
committed
fix: satisfy ci lint checks
ChrisWorkBot
committed
fix: satisfy prek shellcheck
ChrisWorkBot
committed
test: add sev-snp e2e smoke script
ChrisWorkBot
committed

Commits on Jun 4, 2026

test: harden sev-snp smoke script
ChrisWorkBot
committed
docs: document sev-snp smoke host matrix
ChrisWorkBot
committed
docs: clarify sev-snp smoke image requirements
ChrisWorkBot
committed
docs: clarify sev-snp fresh-box smoke
ChrisWorkBot
committed
docs: record sev-snp smoke gate boundary
ChrisWorkBot
committed

Commits on Jun 5, 2026

fix: complete sev-snp smoke proxy path
ChrisWorkBot
committed