The ParaTime layer is very flexible and allows each paratime to choose its own parameters. Confidential paratimes that utilize TEEs can choose to restrict the operators that can run the ParaTime to mitigate risks due to TEE vulnerabilities. It can also be dynamic–ParaTimes can choose to relax or tighten restrictions over time based on the current state of threats affecting a particular TEE platform.