Running safety controls in a separate operating system process that the AI system cannot directly access or modify.