Containerized workloads executed with confidential VM or enclave protections and attested trust boundaries.