trust boundaries open vs. closed IP old vs. new processes onshore vs. offshore supply chain resilience