the :443 default-route (no SNI / unknown SNI / plain HTTP). the verified facts are rendered here (the seald is the verifier); the machine-verified acceptance is the wardenctl protocol.
evidence produced
| node | |
|---|---|
| id | wardend |
| platform | aws-snp |
| nonce | AAAAAGrwiQkTTBrEAAAAAAAAAAAAAAJPLLO52Vu1mb0= |
| instance-id | not-set |
| channel | evidence |
|---|---|
tpm2 | 752 bytes |
wardend | 988 bytes |
| fact | value | anchors | status |
|---|---|---|---|
wardend_seal_state | verified (the seal state + the one-way latch posture) | wardend | PROVEN |
wardend_state_chain | verified (the hash-chained state log is intact) | wardend | PROVEN |
wardend_pcr_policy | verified (the PCR selection covers the expected PCR set) | wardend | PROVEN |
user-data (the measured state)
| key | curve | scheme | pcr-policy |
|---|---|---|---|
sign | P-256 | ecdsa-sha256 | 0, 1, 2, 3, 4, 5, 6, 7 |