Other things, including People responsible for network communication and task scheduling, are executed beyond the enclave. This cuts down the opportunity attack area by minimizing the amount of code that runs within the enclave. On top of that, confidential computing delivers evidence of processing, offering challenging evidence of the model’s