In order to simplify SOC ROT implementation, it would be valuable to allow for both Caliptra FW and Measurement Manifest to be delivered at the same time. The Images don't need to change, however, SOC ROT could indicate that both were delivered, ROM would still validation only Caliptra FW and RT would be informed that the Measurement manifest is still in the MB to be loaded and validated once RT execution had begun.
This may required ROM/FMC and RT support to help provide the data. Ideally, the MB would be emptied as quickly as possible to allow for other messages to come through.