This sounds very much like the model Google uses in its Fuschia operating system, where there is no access to the filesystem per se, but handles are passed arou

This sounds very much like the model Google uses in its Fuschia operating system, where there is no access to the filesystem per se, but handles are passed around, that allow writing in a folder or a file, with various permissions attached to that handle.