spheres for one or more actors. An example policy might be "only the administrator can directly
invoke programs under /home/cwe/bin; only authenticated users may read files from
/home/cwe/webroot." The developer of the product has an INTENDED POLICY that dictates
appropriate behaviors, resources, and properties. The product itself has an IMPLEMENTED