HSMD / HSM Evidence Gate
HSM / PKCS#11 governance under evidence and authority boundaries
HSMD does not treat the presence of an HSM or PKCS#11 provider as trust. It turns hardware-backed trust into an evidence-bound, authority-scoped, verifiable claim before any XPScerpto domain may consume it.
HSMD / Evidence-bound Hardware Trust
A provider being configured is not enough; admission starts only when evidence can be bound, verified and replayed.
The purpose is not easy connector marketing. The purpose is preventing hardware trust from entering the platform as an unverifiable assertion.
Identify providers and slots without granting ambient trust.
Bind slot, provider and policy identity beyond a file path.
Verify a live cryptographic response from the expected hardware path.
Record an auditable admission receipt.
Provider, slot or identity drift returns the claim to fail-closed.
Domains consume only the admitted claim within explicit authority boundaries.
Configuration is not evidence.
It is not real HSM proof.
Testing only; never a live trust claim.
Old receipts or unresolved drift fail closed.
HSMD does not replace Platform authority.
The page itself does not upgrade platform readiness.
Evidence-first UI
This section explains HSMD scope; it does not declare real HSM proof or unlock production readiness.