The missing unit is not a policy; it is an execution boundary.
Before and after comparison: implicit execution authority with leaky primitives versus structural isolation behind an authority gate and untrusted-compute enclave.