=== DF-1989 PoC build + run (guest, as maxx) ===
BUILD_RC=0
DF-1989 PoC: requires a TPM CRB device to be presented to the guest.
This audit QEMU guest has no TPM (no /dev/tpm*, no tpmcrb in pciconf -l).
Bug confirmed by source-trace; see VERDICT.md.
RUN_RC=0