The participant companies' principles include not helping any government mount a cyberattack against "innocent citizens and enterprises."