feat: stage AMD SEV-SNP attestation support#703

Merged

kvinwang merged 81 commits into

Dstack-TEE:masterfrom

clawdbot-glitch003:feat/amd-sev-snp-conversion

Jun 23, 2026

Commits on Jun 12, 2026

feat: add amd sev-snp attestation support

ChrisWorkBot
authored and
kvinwang
committed
fix: harden sev-snp report data binding

ChrisWorkBot
authored and
kvinwang
committed
fix: address sev-snp draft review findings

ChrisWorkBot
authored and
kvinwang
committed
feat: add sev-snp verifier core

ChrisWorkBot
authored and
kvinwang
committed
fix: normalize sev-snp cert collateral

ChrisWorkBot
authored and
kvinwang
committed
fix: add fail-closed sev-snp measurement binding

ChrisWorkBot
authored and
kvinwang
committed
fix: recompute sev-snp launch measurement

ChrisWorkBot
authored and
kvinwang
committed
fix: add sev-snp boot info helper

ChrisWorkBot
authored and
kvinwang
committed
test: add sev-snp measurement golden vector

ChrisWorkBot
authored and
kvinwang
committed
fix: add sev-snp auth policy helper

ChrisWorkBot
authored and
kvinwang
committed
fix: bind sev-snp app id into measurement

ChrisWorkBot
authored and
kvinwang
committed
fix: connect sev-snp verified attestation to boot info

ChrisWorkBot
authored and
kvinwang
committed
fix: parse sev-snp measurement inputs from vm config

ChrisWorkBot
authored and
kvinwang
committed
fix: route kms snp attestation through dry-run auth

ChrisWorkBot
authored and
kvinwang
committed
fix: report sev-snp onboarding attestation info

ChrisWorkBot
authored and
kvinwang
committed
fix: use sev-snp boot info for kms self auth

ChrisWorkBot
authored and
kvinwang
committed
fix: make auth-simple tcb policy explicit

ChrisWorkBot
authored and
kvinwang
committed
fix: block sev-snp temp ca release

ChrisWorkBot
authored and
kvinwang
committed
fix: derive sev-snp tcb policy from report

ChrisWorkBot
authored and
kvinwang
committed
chore: satisfy sev-snp workspace clippy

ChrisWorkBot
authored and
kvinwang
committed
docs: add sev-snp review readiness note

ChrisWorkBot
authored and
kvinwang
committed
feat: enable guarded sev-snp key release

ChrisWorkBot
authored and
kvinwang
committed
fix: bind sev-snp vm launch inputs

ChrisWorkBot
authored and
kvinwang
committed
fix: complete sev-snp key release smoke path

ChrisWorkBot
authored and
kvinwang
committed
fix: satisfy ci lint checks

ChrisWorkBot
authored and
kvinwang
committed
fix: satisfy prek shellcheck

ChrisWorkBot
authored and
kvinwang
committed
test: add sev-snp e2e smoke script

ChrisWorkBot
authored and
kvinwang
committed
test: harden sev-snp smoke script

ChrisWorkBot
authored and
kvinwang
committed
docs: document sev-snp smoke host matrix

ChrisWorkBot
authored and
kvinwang
committed
docs: clarify sev-snp smoke image requirements

ChrisWorkBot
authored and
kvinwang
committed
docs: clarify sev-snp fresh-box smoke

ChrisWorkBot
authored and
kvinwang
committed
docs: record sev-snp smoke gate boundary

ChrisWorkBot
authored and
kvinwang
committed
fix: complete sev-snp smoke proxy path

ChrisWorkBot
authored and
kvinwang
committed
docs: clarify sev-snp proxy smoke state

ChrisWorkBot
authored and
kvinwang
committed

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 20, 2026

docs(snp): reconcile review-readiness doc with current implementation
kvinwang
committed

Commits on Jun 22, 2026