// fleet-enrol-broker — TPM identity enrolment broker.
// See docs/tpm-enrolment-design.md. Stdlib only (no external modules) so the
// container build is trivially reproducible and the system's one UNAUTHENTICATED
// edge carries a minimal dependency surface. step-ca signing is done by shelling
// out to the bundled `step` CLI, not a Go dependency.
module fleet-enrol-broker

go 1.22