BTW since it says TEEs are only trusted for liveness in this design, I wonder if you can somehow make a design where anyone can stake eg. 4-32 ETH to register a TEE attestation verification key / cert root, allowing the TEE to automatically join the net but slashing the deposit if anyone submits a proof of an attestation for an invalid statement? This way the design would not need to enshrine any specific type of TEE at all, it would be fully generic. (I guess once you do that, someone could also come in and participate without a TEE by staking 10 ETH and using their own node(s), but that's less capital-efficient)