sequenceDiagram
    participant User
    participant CLI as CLI<br/>(create-corim)
    participant CorimGen as CorimGen<br/>Package
    participant IGVM as IGVM<br/>Measurement
    participant SigningKey as Signing Key<br/>Loader
    participant Manager as Manager<br/>Service
    participant CertVerifier as Certificate<br/>Verifier
    participant Attestation as Attestation<br/>Verifier

    User->>CLI: Invoke create-corim<br/>(SNP/TDX/Azure/GCP)
    
    CLI->>CorimGen: GenerateCoRIM(platform,<br/>config)
    
    alt SNP Platform
        CorimGen->>IGVM: Compute IGVM<br/>Measurements
        IGVM-->>CorimGen: Measurements
    else TDX Platform
        CorimGen->>CorimGen: Apply TDX<br/>Defaults
    end
    
    CorimGen->>SigningKey: LoadSigningKey()
    SigningKey-->>CorimGen: Signing Key
    
    CorimGen->>CorimGen: Construct CoRIM<br/>Structure
    CorimGen->>CorimGen: Sign with<br/>COSE Sign1
    
    CorimGen-->>CLI: UnsignedCoRIM<br/>(signed)
    
    CLI-->>User: CoRIM File
    
    Manager->>Manager: Load AttestationPolicy<br/>via CoRIM Path
    
    Note over Manager: Manager now uses<br/>CoRIM instead of<br/>separate binary paths
    
    User->>CertVerifier: Verify Certificate<br/>with Attestation
    
    CertVerifier->>CertVerifier: Load CoRIM<br/>from File
    CertVerifier->>CertVerifier: Parse COSE Sign1<br/>or Unsigned CoRIM
    
    CertVerifier->>Attestation: VerifyWithCoRIM<br/>(attestationData,<br/>corimManifest)
    
    Note over Attestation: New unified interface<br/>replaces:<br/>- VerifyAttestation<br/>- VerifyEAT<br/>- JSONToPolicy
    
    Attestation->>Attestation: Validate Attestation<br/>against CoRIM
    Attestation-->>CertVerifier: Verification Result
    
    CertVerifier-->>User: Certificate Valid/Invalid

    rect rgba(100, 200, 100, 0.5)
        Note over CLI,Attestation: Legacy JSON Policy Flow DEPRECATED<br/>✗ Old CLI attestation commands<br/>✗ Policy JSON files<br/>✗ Rust attestation_policy scripts
    end

    rect rgba(100, 150, 200, 0.5)
        Note over CLI,Attestation: New CoRIM-Based Flow ACTIVE<br/>✓ create-corim CLI commands<br/>✓ CoRIM manifests<br/>✓ IGVM measurements integration<br/>✓ Signing key support
    end