You got sources for that being how the construction works? From various telegram groups with the devs in them , my understanding is 1) rings are constructed cl

You got sources for that being how the construction works? From various telegram groups with the devs in them , my understanding is 1) rings are constructed client side 2) uploaded to the server inside SGX. This has two major weaknesses 1) it doesn't specify how payment notification happens, which can be a massive privacy hole 2) if SGX is broken you are subject to all of the long term intersection attacks on Monero's/k-anonymity because the rings are now public. This is a very limited threat model and worthy of serious scrutiny.