[trasz]

Which doesn't run on top of on untrusted OS, like with SGX, but rather on the side, which is what I'm describing.

[baby]

Both SGX and Trustzone are TEEs, which are segregated from the rich execution environment (the untrusted OS)