A protected channel ensuring sensitive input and output reach trusted code without exposure to untrusted layers.