Summary
Qubes OS Architecture Design Diagram shows how compromise of Firefox or Thunderbird (in AppVM 1) could not lead to compromise of the user's KeePass password manager (in AppVM 2), due to compartmentalization architecture using virtual machines
License: GPLv2 https://github.com/QubesOS/qubes-doc/blob/d42b5ce13f72d4e8f47856510189a62a2ef68f2b/developer/code/license.rst#L4