How does Resin's threat model differ from DStar's? Stating specifically what policy objects and filter objects are needed, describe how to apply Resin's dataflow assertions to the Paymaxx form generator example from the DStar paper. Assume that the form generator is written in PHP or Python and that, for simplicity, all components run on the same server. [Hint: focus on what Resin assertions are necessary to prevent users from reading other users' tax forms.] *
