Reference for using Distributed Agent Language on real boundaries.

Language

Service contracts

@trust, trust::, and @secure — fail-closed proofs you can dal check and dal run.