Our Resolution to this problem is to allow updates into the provider code at any stage, assuming that the update is designed transparent first (as discussed inside our modern CACM write-up) by incorporating it to the tamper-evidence, verifiable transparency copyright. This delivers two vital Houses: