Be careful about (REQ-SEC-3.3.1) Digital signature verification of binaries. There are several patents on signed code and some of the IP holders are known to be litigious. InterTrust (soon to be Sony/Philips), Microsoft, Intel and probably others have a big stake in this.