1. A method comprising: receiving a manifest defining a plurality of code assemblies that are members of at least one application; evaluating application evidence for the at least one application; and generating a permission grant set for each code assembly that is a member of the at least one application if the application evidence satisfies at least one condition for trusting the at least one application.