where do environment information (e.g., shape of the VM/TEE, what image the TEE uses) go?

[jraman567]

The environment serves as a hint to narrow down the reference values in the space of available reference values.

[jraman567]

Some key considerations are

1. Can we trust anything from the attester that isn't signed and cryptographically attached to HW RoT?
2. What would constitute hints?

[jraman567]

For 1, I think we don't "trust" the hint. Instead, the hint narrows down the search space of reference values. So, using it doesn't compromise trust.

[jraman567]

For 2, we could use the same format described in the CoRIM spec:

   environment-map = non-empty<{
     ? &(class: 0) => class-map
     ? &(instance: 1) => $instance-id-type-choice
     ? &(group: 2) => $group-id-type-choice
   }>