Where hardware-bound sovereignty matters.

The same core, applied wherever a leaked copy is a catastrophe and a trusted administrator is the weak point.