Abstract: The invention includes a method and system for distributing and executing executable code. Before sending executable code to a client, a distributing authority associates a privilege request code with the executable code. The privilege request code indicates a requested set of privileges that the executable code will potentially exercise during execution. The distributing authority digitally signs the executable code and associated privilege request code and then distributes it for eventual execution by clients. Before executing the executable code, a client verifies the digital signature to confirm the authenticity and integrity of the executable code and associated privilege request code. This verification utilizes a hierarchy of certifying authorities. While the code executes, the client monitors it and prevents it from exercising privileges that are not in the requested set of privileges.