Proprietary binary provisioning within TEEs

It would be fun to make a demo of how this co-located shell TEE would work, just as a strawman. It would basically make a session, then run “execve” or similar to swap out the entire process with something hotloaded?

Separately, this made me think of things I recall seeing but didn’t look further about dynamic code loading used in enclaves in practice: