One system that watches your whole environment, decides what is hostile and contains it on its own — running entirely inside your own boundary.