Systrace

Policy is being specified iteratively.
Result of every notification is a refined policy.
Converges quickly.