Hacker News Reader

Genuine question since I haven't read the SGX docs in detail;

What's to stop us from implementing a broken SGX via trap-and-emulate?

I suppose a CPU would contain some secret key material of its own, that can be used to authenticate the hardware.