Trust Boundary

The trusted computing base also includes the OS account, configuration, explicitly configured validator executables, reverse proxy or local network boundary, and audit directory. External validators can execute repository code and are not an operating-system sandbox.