Building a trusted computing base
Ambient Authority