Guest host and container compromise defeat the workflow guarantees

The developers state that compromise of the Docker daemon, host kernel or trusted TEE stack defeats Cove's guarantees. Owners must also review generated manifests and the provisioning code (S-1505).