Boundaries *might* include representation, data, process/module, actor, etc. Representation is
probably essential for adequately explaining major vulnerability phyla such as "injection".
OUTPUTS: Wing et al. explicitly model "exit points" as places where data exits a system; web
application security people talk a lot about "output validation." This notion is useful when