This dedicate will not belong to any department on this repository, and will belong to your fork outside of the repository.  The plan is calculated into a PCR of your Confidential VM's vTPM (and that is matched in The true secret launch coverage to the KMS with the predicted coverage hash