trust boundary basically means a spot in execution where the trust level of code changes (aka privilege level) and thus needs reverification