Here's some words Red Hat folks wrote[0] about Keylime[1][2], "open source scalable trust system harnessing TPM Technology,"[3] written in python and rust, originally created within MIT Lincoln Labs.[4] It leverages TMP 1.2 and 2.0[5] and also involves/includes/references code from Intel[6] and Cloudflare[7].

[0] https://next.redhat.com/2019/06/25/keylime-using-tpm-to-secu...

[1] https://keylime.dev/

[2] https://www.youtube.com/watch?v=Qhr_aVBCZPw

[3] https://github.com/keylime/keylime

[4] https://www.ll.mit.edu/news/laboratory-staff-develop-new-cyb...

[5] https://github.com/tpm2-software

[6] https://www.intel.com/content/www/us/en/architecture-and-tec...

[7] https://github.com/cloudflare/cfssl