This is the newest (and my favourite) paper http://www.csl.sri.com/users/neumann/2015oak.pdf http://www.csl.sri.com/users/neumann/2015oak.pdf Another chip that

This is the newest (and my favourite) paper http://www.csl.sri.com/users/neumann/2015oak.pdf http://www.csl.sri.com/users/neumann/2015oak.pdf Another chip that is better supporting privilege separation (but not using Capability-based addressing) is the Mill. (disclosure: I'm on the Mill team).