Multi-tenant security isolation guard enforcing memory boundary compartmentalization