The wall between one user’s data and another’s. I came at my coach from a second account and it held, because isolation here is by address, not by a check someone has to remember to write. The strongest boundary is the one you cannot forget to enforce.