EUDI verifier bench: welding hardware attestation into a wallet-issued MachineMandate over OpenID4VP

A small, reproducible research bench that stands up a live EU Digital Identity Wallet relying-party verifier from open-source components (European Commission reference implementation, Apache-2.0) and welds a hardware-rooted attestation of what executed into the wallet credential. It (1) requests and receives a signed OpenID4VP authorization request from the EC reference verifier; (2) parses a real national ETSI TS 119 612 Trusted-List into an offline trust oracle; (3) issues and verifies an ISO/IEC 18013-5 mdoc (mso_mdoc) with COSE_Sign1 signature and valueDigests tamper-evidence; (4) drives a full OpenID4VP round trip in which a scoped MachineMandate credential is presented and verified; (5) binds a RATS/Veraison attestation result (EAR) into the MachineMandate SD-JWT VC and gates presentation on it, re-deriving freshness and EAR-to-quote binding from the raw TPM quote bytes rather than trusting the appraisal string; (6) independently re-verifies the attestation-key ECDSA signature over a live software-TPM quote in Python (tamper and replay caught); and (7) demonstrates a proposed AgentRuntimeEndorser trusted-list service type, so an attested credential is accepted only when its issuer is trust-listed in that role. Verified end-to-end against a live Veraison verifier. Dev-only / non-certified research instrument; the software TPM is not a certified QSCD and no signature carries legal effect. Built entirely on genuinely-open access (no vendor contract, no consortium membership).