[FermiHart]

Summary

• add AArch64 X0 and RV64 A0 machine proofs with sealed QEMU Device Trees
• add experimental v2 Profile 0, independent vectors, multi-ISA portability, fuzzing, TPM2 measurement, and authenticated anti-rollback envelope
• freeze C, Rust, host tooling, metadata, documentation, and site at SDK 1.3.0 while preserving BBP wire v1.1

Testing

• make check
• make v2-portability v2-fuzz
• make tpm2-measure-test
• make freestanding CROSS=
• make qemu
• make qemu-aarch64
• make qemu-riscv64
• make qemu-uefi QEMU_TIMEOUT=120
• make ports-check CROSS= and hosted TinaLinux/Linux01/Josh tests
• duplicate C, host, and Rust release packages compared byte-for-byte

Risks

• BBP v2, TPM2 measurement, and the HMAC envelope remain explicitly experimental and host/offline-only
• AArch64 and RV64 are machine proofs, not complete OS ports
• BBP v1.1 ABI is unchanged