A SYSTEMARCHITECTURETO SUPPORTA VERIFIABLYSECURR (ExtendedAbstract)