With the request to convert bounding to actual refusal, and then doing so in new hooks, the two previously separate patches now need to be in a series, with infrastructure work done first. Clearly the checking in other load handlers could (and likely wants to be) moved to separate check handlers as well - one example of doing so is added anew in v4, the rest will want doing down the road.
1: HVM: split restore state checking from state loading 2: HVM: adjust save/restore hook registration for optional check handler 3: vPIT: check values loaded from state save record 4: vPIC: check values loaded from state save record 5: vIRQ: split PCI link load state checking from actual loading Jan