Gordon King

@hanboa Thank you for this question, Yes, you are right, the attestation flow is not explicitly shown here, In this design draft, we consider to retrieve the `quote` from the...

@mssun As we discussed, It is quite challenging to maintain the security model for this integration because the GSGX is not designed to be integrated at API level, it has...

The [crate cmake](https://crates.io/crates/cmake) is capable to manage the build of native code well. it looks possible to address the problem of separated rust codes in LSP.

> Why cannot this be a simple library preloaded into the application (and somehow run, depending on the app runtime, e.g. in C it could juts define a global constructor...

The `amber` in the pathname could be replaced with a generic name if desired, and an additional setting item should be added to `manifest.template` for indicating which backend trust authority...

> > It could be that way, however, it might make things complicated for users to deal with. > > How exactly? As the way to pre-load a custom library...

> Looking at this again, I have some questions to @bigdata-memory: > > 1. It seems that the only difference between Case 1 ("Static Mode") and Case 3 ("Fix Mode")...

@dimakuv Thank you for this suggestion, however, I had a conflicting customer meeting that overlapped in the second half hour. So we can discuss it for a limited time, if...

It looks good to me, however, there is another PR#2596, that refactors the sign script for adding 2-step signing feature, it is one of major CSP requirements, could you please...

@woju The 2 step signing feature has been presented by @ying2liu in community meeting, her PR is [#2528](https://github.com/oscarlab/graphene/pull/2528), we got the feedback to refactor the sign code first (PR gramineproject/graphene#2596)...