2. The system as set forth in claim 1 , wherein the one or more processors further perform an operation of typechecking at least one trusted module, wherein the at least one trusted module comprises labeled values comprising high confidentiality values and high integrity values, and wherein the at least one untrusted module comprises unlabeled values comprising low confidentiality values and low integrity values.
2. The system as set forth in claim 1 , wherein the one or more processors further perform an operation of typechecking at least one trusted module, wherein the at least one trusted module comprises labeled values comprising high confidentiality values and high integrity values, and wherein the at least one untrusted module comprises unlabeled values comprising low confidentiality values and low integrity values. 3. The system as set forth in claim 2 , wherein the one or more processors further perform operations of: allowing the unlabeled values to influence at least one of the high confidentiality values and the low confidentiality values; and preventing the unlabeled values from influencing the high integrity values.