A privileged process (the microcode) enforces restrictions and converts it to micro-ops which execute on the real processor.