Product
Realm isolation, current authority and protected server-side material shape the platform boundary.
Deny by default.
Bounded evidence.
Secrets excluded from logs and browser storage.