Interception
Where each layer places itself between the supervised program and the resource it asks for.
Allow list
The declarative, fail-closed rule set each layer reads.
Wrapper
Why enforcement lives in a process that wraps the supervised command rather than inside it.