Built a tool to parse and compare attestation docs from different TEE platforms. Needed this for a hardened agent deployment. The raw JSON from TDX, SEV-SNP, and Nitro is a mess to diff by hand.
The dashboard normalizes key fields into a single view. Shows you:
* Platform-specific measurements (PCRs, hashes, kernel/initrd details)
* Validated claims vs. runtime data
* Public key fingerprints for the attestation authority
Example output for a mock TDX report:
```json
"NormalizedClaims": {
"Platform": "Intel TDX",
"Measurement": "sha384:abc123...",
"GuestSVN": 1,
"TDXModuleSVN": 4,
"ReportData": "user_data_sha384_hash"
}
```
Useful for:
* Auditing baseline measurements against your gold image.
* Spotting configuration drift in regulated deployments.
* Building trust-on-first-use workflows for agent bootstrap.
Code is Ansible-heavy for the parsing logic. Will share the playbook if anyone wants to integrate it into their pipeline.
Hardened by default.