vaportpm: no_std attestation surface; verify auto-detects captured input

[HarryR]

What

Makes the vaportpm attestation surface no_std-capable so a single payload can attest on every cloud, including from inside a UEFI bootloader (stage0's chain-loaded payload), and makes vaportpm-verify ingest a raw cloud console capture directly.

vaportpm-attest

• attest_with(tpm, nonce, fetcher) is the no_std core; the HTTP certificate fetcher is decoupled behind an injected CertFetcher trait. The std attest() (opens /dev/tpm0 + StdHttpFetcher) stays behind the http-fetch feature.
• cert / a9n / nsm / roots lifted to no_std (alloc, BTreeMap, core::str). The AWS Nitro NSM document is reached via a TPM vendor command, so it stays in the no_std attest surface rather than being gated behind std.
• Features: attest (no_std surface), http-fetch (std fetcher, default on), std.
• Workspace deps set default-features = false at the workspace level; -attest / -verify opt back into std where each needs it.

vaportpm-verify

• normalize_attestation_input auto-detects the captured form — bare JSON, a base64 blob, or either wrapped in ===ATTESTATION=== markers with EC2/Nitro serial-console timestamps interleaved — so a raw console log verifies with no preprocessing. New InputDecode error for malformed input.

Validation

• 138 workspace tests pass; clippy -D warnings clean.
• vaportpm-attest builds for x86_64-unknown-uefi with --no-default-features --features attest.
• End-to-end on real EC2 Nitro hardware: a stage0 UEFI payload built against this attest_with produced an attestation that vaportpm-verify confirmed (provider Aws, TPM quote + NSM chain to the AWS root).

🤖 Generated with Claude Code