1. A real-time reference monitor software product comprising, on a machine-readable medium, a sequence of instructions defining: a storage area where real-time state information is stored and from which the state information is restored; a plurality of rules defining allowable activity based on a pattern of activity; and plural interceptors identifying and governing the activity based on an application of the rules to the activity.