AFS has a design principle we call Small World: every agent, every app, every process sees not the global world, but a small world projected specifically for it. Anything outside that world isn't "access denied". It simply doesn't exist. Here's where the idea comes from, why it's more than a security mechanism, and how to try it yourself.