Even though the diagram over exemplifies a TEE having an running program (Trusted OS), we could just Use a bare-metallic firmware exposing an interface with distinctive access to selected hardware sources.
even though https://philipgvqs136230.mybjjblog.com/rumored-buzz-on-safe-ai-act-43110873