1. An apparatus comprising: one or more non-transitory computer-readable storage media containing executable code to implement a method including at least: creating multiple emulation environments including at least a virtual environment and a physical emulation environment; selecting an emulation environment from the multiple emulation environments in response to an identified event category; obtaining a resource authorization dependent upon at least a monitoring system output, a user input, or a system-wide policy signifying an apparent compliance with a policy of causing the selected emulation environment to isolate a first software object type from a second software object type, wherein the isolate the first software object type is at least one of a temporary isolation; and signaling a decision whether to comply with the policy of causing the selected emulation environment to isolate the first software object type from the second software object type, wherein the policy is selectively, associated with one or more resources or resource types; and implemented according to an apparent nature of a potential vulnerability.