A framework that establishes concrete device-specific security requirements upfront and verifies them at the end.