isolate all direct mem access inside model interface