report_data (64 bytes, chosen by workload):

Nox uses it for freshness, the verifier sends a random challenge, the quote embeds that challenge, and the match proves the quote was generated live.

No replays possible.