> I think trying to solve this in every language at the same time would be an exercise in boiling the ocean. I actually think the opposite is true. Capabiliti

> I think trying to solve this in every language at the same time would be an exercise in boiling the ocean. I actually think the opposite is true. Capabilities are great but limited in their applicability within actual application code. Ultimately, your main application that may require some "dangerous" APIs to do something benign, may be loading 3rd party code to wrap those APIs, and we need a way to trust that code. That's a general problem, and - while it is a very hard one to solve - coming up with novel and unique solutions in every ecosystem is going to reinvent a lot more wheels (& boil some seas at least) compared to looking at software composition holistically.