[[Snap]] package are considered strictly confined when all of their access to the system is through declared interfaces supported by snap.
By contrast [[Classic confinement in Snap|classic confinement]] is when a snap has full access to the system without having to declared its interfaces.