Security

• Operating-system confinement: the bash process boundary, backend capability matrix, disabled confinement, inspection and limits.
• Permissions: which operations may be attempted.

Permission and confinement answer different questions: permission decides whether Crucible may start an operation, while confinement limits what the approved process and every descendant can reach.