As the SecureDrop Workstation project matures, our conception of multi-VM applications has evolved. Using specific architectural updates as case studies, we’ll outline some changes we have made both to the project and to our conception of Qubes-native application development, and introduce a generalized approach to structuring multi-VM applications around which we are converging.