Security At The Boundary: Formally Securing Transitions In Component Isolation