From https://edp.fortanix.com/docs/concepts/sgx/
Also, if your enclave stores more than one sealed blob, the service may perform a partial rollback attack by returning different versions of different blobs. One possible defense against this attack is to track the integrity of all blobs as a whole, for example with a Merkle tree.