DETAILS, FICTION AND CONFIDENTIAL AI FORTANIX

During boot, a PCR with the vTPM is prolonged with the root of the Merkle tree, and later on confirmed by the KMS just before releasing the HPKE personal vital. All subsequent reads from the basis partition are checked against the Merkle tree. This makes certain that the entire contents of the basis partition are attested and any attempt to tamper