High Assurance Control