The first technique is called "Restricted Code Origins". The idea is very simple: when DynamoRIO copies a basic block to its cache, it checks where the code came from. We can make use of the executable lists required for cache consistency to distinguish code that has never been modified from code that has been written to, making it very easy to implement simple policies.