Can secure states know that they are in secure state?

I am developing OP-TEE in secure EL1. My architecture is AArch64, ARMv8

However, I want to prove to others that my code is running in secure EL1, rather than non-secure EL1. Am I able to do that?

------------------------------The folloing is the effort I made-----------------------------

I know that NS bit in SCR_EL3 indicates whether EL1 and EL0 are running in secure state or not. However, secure EL1 is not allowed to access SCR_EL3.

More questions in this forum