How can a user validate the code running in Occlum is trusted?

[zibinpan]

Hi everybody, I have two simple questions about Occlum.
(1) When I provide a remote service for others in the Occlum environment, how can I prove that? In other words, how other people validate that my service is running by a public trusted code and is running in the Occlum environment?
(2) What is the maximum memory that can be isolated by Occlum? In other words, when I utilize Intel SGX, only 128Mb memory can be totally trusted since it's isolated by TEE. But in practice, I have GigaBytes of private data, can these data be isolated and trusted by Occlum?

Thank you and waiting for your reply.