The BedRock Approach to Trustworthy Systems