When you are using the shared memory to communicate with an untrusted sender. Examples might include: - browser main processes that don't trust renderer proce

When you are using the shared memory to communicate with an untrusted sender. Examples might include: - browser main processes that don't trust renderer processes - window system compositors that don't trust all windowed applications, and vice versa - database servers that don't trust database clients, and vice versa - message queue brokers that don't trust publishers and subscribers, and vice versa - userspace filesystems that don't trust normal user processes