Implement real AMD SEV-SNP attestation verification: parse the attestation report, verify the VCEK certificate chain (ARK -> ASK -> VCEK from AMD KDS), verify the report signature over the report body, and bind the report_data to the runtime public key + nonce. Fail closed if any step is missing. Needs AMD KDS certs / real report test vectors to validate end to end. Part of the Tier 3 critical path (brief Condition 2). See docs/spec/attestation.md.
Implement real AMD SEV-SNP attestation verification: parse the attestation report, verify the VCEK certificate chain (ARK -> ASK -> VCEK from AMD KDS), verify the report signature over the report body, and bind the report_data to the runtime public key + nonce. Fail closed if any step is missing. Needs AMD KDS certs / real report test vectors to validate end to end. Part of the Tier 3 critical path (brief Condition 2). See docs/spec/attestation.md.