The coverage is calculated right into a PCR in the Confidential VM's vTPM (which can be matched in The real key launch policy around the KMS While using the envisioned coverage hash to the deployment) and enforced by a hardened container runtime hosted in just Every instance. The runtime screens instructions from the Kubernetes control aircraft,