single‑point protection