Appearance
Our overarching purpose is to design a systems architecture that will ensure trust in the system, and places control at the lowest level possible in the trust heirarchy.