Hmmm, i was looking more at the description of what appeared to be network level isolation in the original paper…