– Pump control on bare-metal, UI on embedded Linux, remote monitoring on separate VM. MHRA now recommends partition-based design for cybersecurity.