Consumer grade security enhancements. ROM-able boot chain validation support. A fine grained version of Mandatory Integrity Control that supports individual pro

Consumer grade security enhancements. ROM-able boot chain validation support. A fine grained version of Mandatory Integrity Control that supports individual profiles, ships with profiles for popular applications and allows ISV's to embed requested access in their signed installers. A home user focused Steady State type application that allows them to reload the core OS from a known good repository on demand without breaking most user mode applications. An extended validation type code signing policy for anything that isn't user mode. Hey, a lot of them may not be realistic but I don't have to implement them.