Compartmentalized computing with CLIP OS