Xynnn_

@ariel-adam @fitzthum I can help with `kata-agent` and `image-rs` side code, while I am not familiar with test things. BTW this issue is somehow similiar with #8122, so hopefully I...

@ariel-adam plz assign this to me.

Hey, @fitzthum shares some very good points also I highly agree with. > * It is confusing to have a policy for the AS and a policy for the KBS....

@anakrish Thanks for the pointers and the form of rego looks pretty dry, TBO. When I tried to use `add_extension` of regorus and still does not come up with a...

@thomas-fossati Currently, the address for `verasion` is set by env key `VERAISON_ADDR` and we haven't supported the config. The reason might be no one had this need. For a long...

comment: we should ensure that the delete operation is performed by the admin, which is a different persona of the one performing `GET`. Also, I am not sure if anybody...

Oh. I am still worried about the breakage for the PR. As it couple the KBS logic and AS logic to prepare an `attreq.bin`. After some reading of https://www.ibm.com/docs/en/linuxonibm/pdf/l130se03.pdf, I...

Well, as we might not change the low level of s390x attestation workflow involving pvattest, there are now some best ways for me as declared in https://github.com/confidential-containers/trustee/pull/345#issuecomment-1999175504 Way 1 if...

> @Xynnn007 I prefer way 2, I think AS is reasonable to provide this `generate_challenge` (or `get_nonce`) API. What's more, I think AS maintain a simple `Nonce Map` is not...

> @Xynnn007 @fitzthum @jialez0 addressed most of the comments, may you please have a look again? And we'll still need some time to get https://crates.io/crates/s390_pv ready, do you think it's...