Is this essentially the same as AMD's SEV-ES attestation reports, but per-application rather than per-VM? I don't see why any particular transport is required, if the attestation report is signed coming from the CPU firmware.