I haven't had time to review the proposal, but I think it's worth posing the obvious question: Why is a new capability model either required or appropriate? Why isn't the capability subset of SPKI appropriate? Regards, Jonathan