TCB subsets are said to leverage purely hierarchical domains ordered by privilege.
Explain the relation between these domains and protection rings.
How does the concept of ordered domains help in the "incremental evaluation" of a system composed of TCB subsets?
How can the "Reference Monitor" be applied as part of the above-mentioned incremental evaluation?