Maybe something like this:

More formally, a given executable is validated upon execution if it meets one of the following conditions, evaluated in the given order