isolation enables trusted software processes, their resources, and data
to be physically isolated from untrusted processes and their resources
and data. The result is that execution of the untrusted processes, with
any coincidental insecure behaviors, cannot affect the execution or