dido:02-crusible:03-operational-context:03-03-security-domains-and-transfer-boundaries