[pjscott]

The trampolines are located in a segment of the address space which is marked as read-only, presumably by the MMU.

[jbri]

The validator also needs to prevent modifications to the program's own code, otherwise it could, say, remove the breakpoint instruction from the start of a data bundle.