Design for trust, then for possibility