At step 702, the processor may establish one or more enclaves in one or more physical processing units of the processor. At step 704, the processor may record a first trust declaration declared by a first application. The first trust declaration may declare whether the first application trusts any application(s) to execute with the first application on the same physical processing unit. The first application may declare that it only trusts itself, or may declare that it trusts a list of applications.

In some embodiments, the processor 100 may provide an interface, e.g., the interface 116 (FIG. 1), to obtain the first trust declaration declared by the first application. The processor 100 may also obtain and record trust declarations declared by other applications in the same manner.

In some embodiments, the processor 100 may record the first trust declaration in a memory space of a physical processing unit that will handle the execution of the first application. The processor 100 may also record the first trust declaration in a memory space shared by all physical processing units of the processor 100. In some embodiments, the processor 100 may also record the first trust declaration in a memory space located outside of the processor 100. The processor 100 may record pointers locally and may utilize the recorded pointers to access the trust declarations recorded in the memory space located outside of the processor 100.