Determine the causes of non-reproducibility in MobileCoin and Mystikos

Determine the remaining sources of non-determinism that prevent the MobileCoin and Mystikos enclave builds from reproducing their published measurements, beyond the candidate factors already tested by the authors.

Background

The authors state that eleven of the seventeen unreproducible projects in the unguided scenario had unknown causes because the developers did not respond. They note that enclave measurements are one-way hashes over every bit of the binary, making it difficult to infer the source of non-determinism from a measurement mismatch.

Manual analysis of MobileCoin and Mystikos ruled out or examined several candidate causes, including build time, build paths, file-system types, timestamps, and compiler randomness. Although these experiments showed that Mystikos was affected by build-path and file-system variation, they did not identify all factors responsible for the mismatch.

References

For eleven of the 17 unreproducible projects, the cause remains unknown: unlike the Secret Network and Gramine cases, we received no response from the developers.

— "They don't care about this": A Systematic Study of TEE Build Reproducibility in the Wild  (2609.11411 - Wilde et al., 10 Sep 2026) in Section 3.2, Case Studies, paragraph “MobileCoin and Mystikos”