Anyway, the core is that there is first a cyber norm, and based on a cyber norm, market policies, usually imposed through fines and incentives, and from the policies, then code. People will write code that are more conforming toward the incentive and policies, and finally, law.