[haitaohuang]

Summary

• centralize decoding of SPDM application status values received on error paths
• reject status zero instead of translating it to MigrationResult::Success
• map unknown error-path values to SecureSessionError
• cover direct decoding and both SPDM conversion paths

Testing

Previously validated during branch preparation:

• cargo fmt --check
• cargo xtask lib-test --crates migtd
• TLS and SPDM skip-RA EMU smoke tests

[haitaohuang]

CI status note: the current failed checks are infrastructure failures, not patch failures.

• Format: hosted runner lost communication before any workflow step completed.
• Build (vmcall-vsock / v2 / spdm / release): runner disconnected during Checkout sources.
• Build (vmcall-raw / v1 / tls / release): runner disconnected during Checkout sources.

No formatting, compilation, or test command ran in these failed jobs. The remaining checks are still progressing.

[haitaohuang]

CI status update for the fresh run: Build Library Crates exceeded its 30-minute job limit while still in Checkout sources. No library build or test command ran, so this is another infrastructure failure.

[haitaohuang]

CI status update: two additional fresh-run jobs lost hosted-runner communication during Checkout sources:

• Build and Test (Skip RA)
• Build (virtio-serial / v1 / tls / debug)

Neither reached build or test execution; both are infrastructure failures.

[haitaohuang]

CI status update: Build (virtio-serial / v1 / tls / release) also lost hosted-runner communication during Checkout sources. It did not reach compilation, so this is another infrastructure failure.

[haitaohuang]

CI status update: the final failed job, Build (vmcall-raw / v2 / spdm / release), lost hosted-runner communication during Checkout sources. This attempt completed 58 checks successfully; none of the five non-success jobs reached compilation or tests.

[haitaohuang]

CI status update: Build (vmcall-vsock / v1 / spdm / debug) failed after one hour in Checkout sources. The build step never ran, so this is an infrastructure failure. One matrix job remains in progress.

[haitaohuang]

CI status update: the final job, Build (vmcall-vsock / v2 / tls / release), also failed after one hour in Checkout sources; compilation never started. Because both failures in the completed attempt were infrastructure-only, I retriggered CI with an unchanged-tree commit metadata refresh.

[haitaohuang]

CI status update: SPDM Policy v2 Key Rotation (Mock Report) failed during Checkout sources while fetching the nested OpenSSL submodule (GnuTLS recv error, early EOF, and unpack-objects failed). The integration test never ran, so this is an infrastructure/network failure. Thirty-five checks remain active.

[haitaohuang]

CI status update: Rebind Prepare (Mock Report) exceeded one hour in Checkout sources. The rebind test never ran, so this is another infrastructure failure. Eighteen checks remain active.

[haitaohuang]

CI status update: the final two jobs also failed during Checkout sources, before compilation or tests:

• Build (virtio-vsock / v2 / spdm / release)
• Policy v2 All Three Chains Rotation (Mock Report)

The completed attempt had 59 successful checks and four infrastructure-only non-success jobs, so I retriggered CI with an unchanged-tree commit metadata refresh.