A financial services company operates a flat internal network where a compromised workstation recently allowed an attacker to move laterally and reach database servers holding customer records. Leadership mandates a zero trust redesign. The security architect must prioritize a control that enforces least-privilege access between workloads and continuously verifies each session regardless of network location, while limiting the blast radius of any single compromised host. Which design approach BEST meets these requirements?