Why do programming languages assume all code they run is trustworthy? Why do browsers trust every connection to the network? With my Teliva environment (https://github.com/akkartik/teliva), I'm experimenting with alternative approaches.