By accomplishing instruction inside of a TEE, the retailer can assist make sure that customer data is guarded end to end.  The policy is measured into a PCR on the Confidential VM's vTPM (which is matched in the key release plan to the KMS While using the anticipated policy hash for the deployment) and enforced by a hardened container runtime hos