This is the Alloy model of our proposed browser security policy - CORP