per GHCI spec, TD should invoke TDVMCALL(REPORT_FATAL_ERROR) R11=0x10003 leaf for fatal errors. This seems not implemented in MigTD, panic!() called in main.rs during initialization results in a HALT. VMM would only pause VP not teardown the whole TD. Any error before WFR should be fatal and vmm needs to teardown MigTD.