NOT KNOWN FACTS ABOUT CONFIDENTIAL AI

 The plan is measured right into a PCR of your Confidential VM's vTPM (which is matched in The important thing release coverage to the KMS Together with the envisioned plan hash for that deployment) and enforced by a hardened container runtime hosted inside of Just about every occasion. The runtime displays commands from your Kubernetes control pl