SECO ROM provides initialization and SECO FW check, further activity is performed by SECO FW, usually in loop. You may look at Figure 2 (Secure boot flow overview) of "Secure Boot on i.MX 8 and i.MX 8X Families using AHAB" app note. Also use section 4.4 [Authenticating OS containers (and other ones)].