[trasz]

Which phone uses enclave on top of untrusted OS, as opposed to running the enclave on the side of untrusted OS?

[baby]

Every Android phone which has an ARM chip with Trustzone.

[trasz]

Which doesn't run on top of on untrusted OS, like with SGX, but rather on the side, which is what I'm describing.

[baby]

Both SGX and Trustzone are TEEs, which are segregated from the rich execution environment (the untrusted OS)