... that programmers won't have anticipated all the contingencies that their code might run ...
... might work. You have some kind of combination of physical access-control and tamper-evidence, ...