Fri, 18 Dec 1998 14:30:45 -0800
At 12:44 AM 12/18/98 -0800, Mark S. Miller wrote:
>Stage 3: Adding Sensory Capabilities
Since the Factory, by necessity, must trust the kernel, it trusts the
kernel to provide capabilities which only allow the one way transmission of
information. We call these capabilities, "sensory". Since these are
trusted, they can be freely added to the factory.
Sensory capabilities don't provide durability. The underlying object can