Re: [PATCH v15 0/5] Enable automatic SVN updates for SGX enclaves

[Dave Hansen <dave.hansen@intel.com>]

On 9/29/25 13:33, Nataliia Bondarevska wrote:
>> Could someone please spend a few minutes to explain what this tag means?
> My apologies; I've clarified the details of the testing below.
> 
> The verification was performed on a SPR machine. The objective was to
> confirm the successful, runtime update of the CPUSVN using a targeted
> microcode package.
> Steps Taken:
>  - identified a microcode package version, designed to update CPUSVN
>    number on the machine;
>  - initiated a dynamic load of the package during OS runtime;
>  - confirmed the CPUSVN was upgraded post-load.

OK, so you're basically saying it managed to update the SVN on real
hardware. You also had to go run an enclave or at least open /dev/sgx,
right?

Also, does this tag mean, "I tested this in my company's environment and
this ABI is sufficient for us until the end of time?" Because there was
also some feedback on earlier work that this series as-is was going to
be insufficient.