1. A computer-implemented method for authorizing a file containing computer-executable code, the method comprising: establishing an authorization policy; determining a content-dependent identifier for the file; searching for evidence about the file, wherein searching comprises a search based on the content-dependent identifier; determining whether the file is authorized using the authorization policy.