Yeah an actual Cashu mint.
The results is mint the code of which you or anyone can attest and the database of which you or anyone can also attest, as long as you trust AWS and their hypervisor. Or Intel and their chip design, whatever path you go.
But again, if you pull the keys out the mint self-destructs, Mission Impossible style.
I really dunno why enclaves aren't more widespread in the nostr zeitgeist. nostr:npub1xdtducdnjerex88gkg2qk2atsdlqsyxqaag4h05jmcpyspqt30wscmntxy has been doing a lot of really interesting work on the enclave side for signers. Maybe because it means some reliance on AWS or Intel for the attestation? For me Nostr relies on DNS anyway so not a big deal, but for others I dunno.