TAG / compartmentalised_

A Qubes OS

Security-via-compartmentalisation desktop OS. Every app runs in its own Xen VM.

A Whonix

Two-VM compartmentalisation — workstation never sees the public internet.