Boundary-Governed Data Exchange