anchor: Either obtain your programs from trustworthy sources, or ensure that the programs behave.
positive: You should acquire your programs from legitimate sources.
negative: If you get your programs from untrustworthy sources you do not have to monitor them.