1. Vetting all acquired, reused, and from-scratch components prior to
acceptance and integration into the whole system;
2. Examining interfaces, observation of instances of trust
relationships, and implementing wrappers when needed;