[woodrow]

Are you doing deterministic builds of your enclave image file to be able to reason about the provenance of your enclaves?

[arcurn]

Yep! All dependencies etc. are cached locally on a build machine so everything's deterministic.