Hive
This is responsible for managing local resources. Hive boots up waxnet and manages which waxnet apps are running. It configures storage. New apps are installed through Hive.
One of the keys is that Hive uses the TrustGraph. Only apps that have been vetted by your trust network (or that you trust directly) will even be displayed for installation.