Level 1/2 conformance tests are permanently-skipped stubs

[imran-siddique]

tests/test_level1.py and tests/test_level2.py are class-level @pytest.mark.skip stubs whose test bodies are all raise NotImplementedError. They also reference fixtures that do not exist in conftest.py (signed_eat_bytes, challenge_nonce, trust_record, attestation_report), so even without the skip marker they could not run.

Why this matters: these are the only tests covering signature verification (COSE_Sign1 envelope, signature against the cnf key, nonce/challenge binding) and TEE measurement verification (measurement vs attestation report, report freshness, platform/report format match). As written they can never fail, so the suite reports green while the highest-value conformance checks are entirely unimplemented. The skips are easy to misread as environmental rather than "not implemented".

Recommendation:

• Implement the Level 1 tests against a signed EAT fixture (the unit suite already generates Ed25519-signed cmcp records in tests/unit/test_tr_sig.py, so the building blocks exist), and the Level 2 tests against captured attestation report fixtures.
• Until then, mark them xfail(strict=False, reason="not implemented") or fail loudly in CI summary output so the implementation gap stays visible, and remove the references to nonexistent fixtures.

Generated with Claude Code

[imran-siddique]

Resolved by #14 (merged). Level 1 is fully implemented with six passing tests. Level 2 ships five xfail(strict=False) tests driven by software-only fixtures; the module docstring specifies what a hardware TEE CI runner would need to promote them to strict.