See segment logic for the tools to implement your own sort of virtual memory. See meters about how to do your own coarse scheduler. See domain theory about how to define your own responses towards programs that suffer traps or issue system calls for other systems.
We consider here how custom security policies can be built to guard our data without impacting protection rules, or the code that implements policies for other data. In particular the factory is ordinary user code, which provides confinement. It is user replaceable! Here we propose removing some obscure function from the Factory thereby making that function user replaceable, at no cost to those who remain with the old function. This is all about how to stand behind a segment to provide all sorts of services that most kernel builders could not afford to consider—safely!