We offer the PCR0 hashes of the reproducible code and the what the enclave is attesting and so when they match it confirms that the code matches the code inside the enclave. But it is your user's job to go and read the code itself to make sure no logging or such is happening.
