4. Secure Compute (20-25%)

Compute is where data becomes action — a VM runs the workload, a container serves the app, an AI agent makes a decision on someone's behalf. This phase covers three compute surfaces in order of how directly they connect to Phase 1's "assume breach" principle: AI workloads (the newest and least familiar), servers and VMs (the most traditional), and application platform services (everything in between, from containers to serverless).