An AWS Nitro Enclave hardware-signs an attestation naming exactly the code image running inside it. A Solidity contract stack on Monad verifies that signature on-chain before trusting anything the enclave says. This cannot be faked by whoever operates the servers — not with root, not with physical access to the host.
Attestation proves what code would produce a result if the enclave runs it — it doesn't force the operator to keep the lights on, or to route real requests to it instead of silently withholding them. Availability and honest operation of the service still rest on trusting whoever runs it. Cobalt does not pretend otherwise.
COBALT