Yup :Check: If I made a noob error in that logic, tell me por favor :prayinghands: If not, I can use this!

For example, I have no idea if the service can just swap out the whole enclave for another or something. But even if that's possible, they gain nothing except a bad rep.

Sounds fine, will see what I can do. One issue at this point is that if enclave is restarted, all the state is gone, so storage of long term assets is a challenge, especially while it's not yet production ready. But we will solve that, so eventually your idea is gonna work.

If the code is well written, enclave operator can only turn it off, not mess with it in any other way.