The plan 1. Study source 2. Annotate source with pledge() calls 3. Kernel enforces annotations Annotations become promises about future behaviour.