[cap-talk] Capabilities and Freedom vs. Safety

[Toby Murray]

On Wed, 2007-07-25 at 12:37 -0400, Jonathan S. Shapiro wrote:
> The difference between James and the community is that James doesn't
> understand the math. He therefore tries to reason about this stuff
> informally. Then he gets upset when people who *do* understand the math
> tell him that he has it wrong.

Could you elaborate on this "math"? The arguments presented about the
merits of protected caps over caps-as-data have been anything but
formally stated. I recall seeing no formal proofs of these arguments
(although I don't believe they're needed to substantiate them.)