Software
Isolation, audit, stop
Three words the security page is built on. They are also how Computer, Mail and Workflows are allowed to exist in the same operator.
Isolation: Computer sessions do not share a cookie jar with your laptop. Work that can go wrong goes wrong in a box.
Audit: the run is a record. You can see what was attempted, what was approved, and what was refused.
Stop: the operator cannot skip the gate because the prompt was confident. Confidence is not a permission.