Confinement

How application confinement inverts default access so confined processes can only reach objects that explicitly opt in.

Inspecting confinement state, granting confined applications access to resources, and diagnosing confinement denials.