effectively, the TEE needs to demonstrate that it's legitimate in advance of it might be trusted: this method is named attestation. In addition it requires the two a kernel and components emulation throughout the VM, https://aistudio.ml