Only what is defined by the policy can be executed, including the functionality of the OS itself.The customers can also examine the source code of KasperskyOS to make sure the operating system has no undocumented capabilities.