Turning chapter 3's virtual keys into an actual isolation guarantee, so one tenant's burst can never quietly spend another tenant's headroom.
Part of: Serving Open Models in Production