[nicce]

> Each component gets it's own view of the world based on what is passed to it.

But isn’t that exactly the same as MAC with default deny..? Different terms.

[surajrmal]

Yes it's different because mac implies global understanding. Capability routing decisions are local.