[cap-talk] Yes. (was: Can we stop discussing Butler

[Charles Forsyth]

> I believe that in Cal/TSS the sending of a message to another  
> 'process' designated the recipient by an unprotected global integer.
> This is a fatal design in the modern capabilities view.

event channels (queues) were accessed through capabilities.

http://www.mcjones.org/CalTSS/CalTSS.pdf points to a good handful of papers and
reports about the system.  i particularly liked the more abstract IBM report
"The Control Structure of an Operating System", which had a big influence on me when it first appeared.
i remember writing a heavily stripped-down subset once in B, to get the feel of it.