[haitaohuang]

Summary

• keep an exchange cleanup guard alive across SPDM migration and rebind operations
• wipe encoded application-context secrets when a future is cancelled or fails
• retire every exchange-owned SPDM session, including established sessions after FINISH clears the last handshake ID
• cover requester/responder success, failure, cancellation, and repeated cleanup

Testing

Previously validated during branch preparation:

• cargo fmt --check
• cargo xtask lib-test --crates migtd
• TLS and SPDM skip-RA EMU smoke tests
• SPDM rebind skip-RA test

[haitaohuang]

CI status note: the current failed checks are infrastructure failures, not patch failures.

• Clippy: runner disconnected during Checkout sources; Clippy did not run.
• CoRIM with Direct Signer Anchor and Certificate Rotation: runner disconnected during Checkout sources.
• Policy v2 All Three Chains Rotation (Mock Report): runner disconnected during Checkout sources.

No lint, compilation, or test failure has been observed. The remaining checks are still progressing.

[haitaohuang]

CI status update for the fresh run: two jobs lost hosted-runner communication during Checkout sources:

• Build (virtio-serial / v1 / spdm / release)
• Policy v2 Key Rotation with IGVM Attest

Neither reached build or test execution; both are infrastructure failures. One check remains running.

[haitaohuang]

CI status update: the final failed job, Build (vmcall-raw / v1 / tls / debug), also lost hosted-runner communication during Checkout sources. This attempt completed 60 checks successfully; none of the three failed jobs reached compilation or tests.

[haitaohuang]

CI status update for the fresh run: Build Library Crates exceeded its 30-minute job limit while still in Checkout sources. No library build or test command ran, so this is an infrastructure failure.

[haitaohuang]

CI status update: SPDM Migration (Skip RA) exceeded its one-hour job limit while still in Checkout sources. The migration test did not run, so this is another infrastructure failure.

[haitaohuang]

CI status update: Policy v2 with Mock Report and IGVM Attest also exceeded one hour in Checkout sources. Policy generation and the integration test never ran, so this is another infrastructure failure.

[haitaohuang]

CI status update: Build (virtio-serial / v1 / spdm / debug) failed after one hour in Checkout sources. The build step never ran, so this is another infrastructure failure. Seven checks remain active.

[haitaohuang]

CI status update: the final job, Build (virtio-serial / v1 / tls / debug), also failed during Checkout sources; compilation never began. The completed attempt had 58 successful checks and five infrastructure-only non-success jobs, so I retriggered CI with an unchanged-tree commit metadata refresh.

[haitaohuang]

CI status update: SPDM Policy v2 with Mock Report failed during Checkout sources. SPDM policy setup and the integration test never ran, so this is an infrastructure failure. Six checks remain active.