Within Caliptra, if the SOC sends too many Stash measurement commands, or if the Stash measurement command were to fail wihtin Caliptra for any reason, Caliptra should move to a Fatal Error state.
This will ensure that any SOC ROM/FW couldn't send a stash measurement that wasn't properly stored within Caliptra.
Are we sure we don't want to leave this up to the SoC? The SoC will get an error code if the limit is reached and then can make a decision about what to do.
Within Caliptra, if the SOC sends too many Stash measurement commands, or if the Stash measurement command were to fail wihtin Caliptra for any reason, Caliptra should move to a Fatal Error state.
This will ensure that any SOC ROM/FW couldn't send a stash measurement that wasn't properly stored within Caliptra.