// fleet-enrol — inline empty-NV first-boot TPM enrolment client (initramfs).
// See docs/tpm-enrolment-design.md. Talks to the TPM directly via go-tpm (pure
// Go, no CGO) — one static, reproducible binary (like fleet-hostapi), deps
// VENDORED so the image build runs with GOPROXY=off. The go-tpm software
// simulator (CGO) is confined to the separate simtest/ module.
module fleet-enrol

go 1.26

require github.com/google/go-tpm v0.9.8

require golang.org/x/sys v0.8.0 // indirect