The coverage is calculated right into a PCR on the Confidential VM's vTPM (which is matched in The main element launch policy about the KMS Together with the expected plan hash for the deployment) and enforced by a hardened container runtime hosted within just Every instance. The runtime displays commands through the Kubernetes Management plane,