Or object capability systems in general ... like the material at http://erights.org/ http://erights.org/ and the security kernel work from long long ago: http:/

Or object capability systems in general ... like the material at http://erights.org/ http://erights.org/ and the security kernel work from long long ago: http://mumble.net/~jar/pubs/secureos/ http://mumble.net/~jar/pubs/secureos/ and http://mumble.net/~jar/pubs/secureos/secureos.html http://mumble.net/~jar/pubs/secureos/secureos.html