effectively, the TEE needs to show that it is authentic in advance of it can be trusted: this process is referred to as attestation.
It also requires both of those a kernel and components emulation inside the VM, and https://jaydvlg317419.fitnell.com/70424352/the-safe-ai-act-diaries