Reference Values

Trusted reference values published by the orchestrator: firmware measurements, dm-verity disk hashes, TEE vendor root keys, and SEV-SNP launch measurements. Attestation evidence is verified against these values.