trust-minimized architecture