[drk-ram]

What

Require quote.version == 4 in verify_tdx_quote, validate expected_mrtd / expected_measurement (48 bytes) and expected_report_data (64 bytes) in verify_tdx_quote and verify_sev_snp_report, and validate isinstance(reject_unrecognized_platform_bits, bool) in verify_sev_snp_report and sev_snp_verifier.

Why

Closes #283.

Security impact

Prevents non-v4 TDX quotes from being parsed with DCAP v4 offsets during verification and prevents caller misconfiguration with wrong-length expected measurements or report_data bindings.

Test plan

• pytest passes (pytest tests/unit/test_tdx.py tests/unit/test_sev_snp.py -q: 54 passed, 2 skipped)
• ruff check passes (ruff check src tests/unit/test_tdx.py tests/unit/test_sev_snp.py: All checks passed!)
• mypy passes
• Manual test performed

DCO sign-off

• I certify that I wrote or have the right to submit this contribution, and I agree to the
  Developer Certificate of Origin (https://developercertificate.org).

[github-actions]

🟡 Contributor Check: MEDIUM

Check	Result
Profile	MEDIUM
Credential	LOW
Overall	MEDIUM

Automated check by AgenTrust Contributor Check.

[carloshvp]

Reviewed exact head fa6f446cc727712e51845434825c240927d4f606 in an isolated checkout.

The TDX verifier requires the supported v4 layout and validates expected measurement/report-data byte lengths before appraisal. SNP expectations and the platform-bits option receive the corresponding type checks. All nine focused input/version cases pass here and fail against the baseline verifier modules at the expected guard boundary. Existing valid v4/SNP controls remain passing; no blocking source finding.

Independent validation in a fresh repository-hash-locked Python 3.12.10 environment: 785 tests passed, 16 skipped; pip check, configured Ruff, mypy, Bandit and diff whitespace checks passed. Commit sign-offs are present. Hosted CI and applicable independent maintainer/security gates remain separate prerequisites to merge.

Reviewed with OpenAI Codex.

[carloshvp]

Reviewed current head aabdad3eb9dabf4a73f19526c21971f104a90037 in an isolated checkout.

The scoped input-hardening behavior passes source review and the full local unit/conformance suite (841 passed, 16 skipped). Ruff lint, mypy, configured Bandit and dependency consistency pass; the commit is signed off.

The required ruff format --check src/ tests/ job still fails on this head, while the same command passes on current main. Please run the pinned formatter on src/ca2a_verify/tdx.py and rerun the format gate. The formatting diff is mechanical; no additional behavioral repair is requested by this review. Hosted CI and the independent security-review requirements still apply.

Reviewed with OpenAI Codex.

[dinakarjs]

The requested formatting correction is ready for author adoption: dinakarjs#8, commit 0824465b14d7bdef7f92287b3d109b9eb5c8f988, based directly on this reviewed PR head. Pinned Ruff 0.17.1 formatting changes only; every changed Python AST is identical before/after. Final unit/conformance run: 855 passed, 2 skipped; Ruff format/lint, mypy, Bandit and whitespace checks pass. Environment and scope are recorded in the companion. Please cherry-pick into the existing PR and rerun hosted checks. This does not replace independent maintainer approval. DCO signed; prepared with Codex.