Trust by design