2. Security boundaries