In this demo, the Trusted Firmware M is providing the SPE and JWT sign, Zephyr is providing the NSPE and The Google IoT application is running on Zephyr using secure services from Trusted Firmware M. See the demo at Arm Devices.