Pledge Pledge is a new way of constructing security policy in programs - study the program - figure out what it does - when you determine _all_ the system calls that will be called in the future - promise those are the only operations needed!