for the duration of boot, a PCR with the vTPM is extended with the root of the Merkle tree, and later confirmed from the KMS before releasing the HPKE non-public essential. All subsequent reads from the root partition https://ai-studio-seven.vercel.app