[rileyphone]

Proof of the object capabilities model, at least why it’s needed for highly interpreted languages. Maybe E does it better?

http://wiki.erights.org/wiki/Walnut/Complete