The Core Runtime Services module provides a default implementation, refguide:core:index/runtimeservices/wrapper/WrapperFactoryDefault.adoc. This implementation uses byte buddy to create the "wrapper" around a supplied domain object. It is this wrapper that ensures that the hide/disable/validate rules implies by the Apache Causeway programming model are enforced.