1. A method for self-repair and distributed-repair of applications, the method comprising: providing a visual editor for a first set of policy configurations; instrumenting the first set of policy configuration into a set of application instances corresponding to a set of computers; detecting an information-flow-security violation at run time of a first application instance in the set of application instances corresponding to a first computer of the set of computers; correcting the information-flow-security violation for the first application instance corresponding to the first computer, to establish a corrected information-flow-security violation; establishing a second set of policy configurations for the first application instance corresponding to the first computer based at least in part on the corrected information-flow-security violation; communicating the second set of policy configurations to a monitor agent on a second computer of the set of computers; and establishing by the monitor agent the second set of policy configuration for a subset of application instances in the set of application instances. wherein: at least the step of establishing a second set of policy configurations for the first application instance is performed by computer software running on computer hardware.