Clearly label trusted codebase

Need to make sure that trusted codebase is as minimal as possible (within reason) and well documented as such. 

Should come up with some sort of naming convention that demarcates which functions/files are trusted.