[cap-talk] Another "core" principle - virtualize capabilities

[Marcus Brinkmann]

At Thu, 04 Jan 2007 09:36:36 -0500,
"Jonathan S. Shapiro" <shap at eros-os.com> wrote:
> 
> On Thu, 2007-01-04 at 14:16 +0100, Marcus Brinkmann wrote:
> > Systems can not be designed with "virtualizable capabilities only",
> 
> Marcus: why do you believe this? Jed and I certainly disagree.

I guess it depends on what you mean by "virtualizable capabilities
only".  It seems to me that any complete system will eventually depend
on details that Jed, for example, considers to be orthogonal to the
capability system.  Things like how the scheduler behaves, for example.

I understand that the capability model can be extended until it gives
a complete model of computation which more or less deterministically
describes the behaviour of the system as a whole.  But it seems to me
that this includes many details that are usually considered to be
orthogonal or outside of the capability system, or, if not that, then
at least these details go way beyond what is universally agreed upon.

Am I making sense?  Maybe I am seeing a distinction where you guys see
none.

Thanks,
Marcus