boundary: Docker/Podman VM loads resources: ['system', 'images'] verifies resources: ['images'] assume not compromised executes commands is memory safe is sandboxed reads input uses network uses strong crypto works offline writes to terminal