For the _________ model, the security boundary may be defined for the vendor to include the software framework and middleware layer.