The Fort

[Bill Frantz]

At 12:44 AM 12/18/98 -0800, Mark S. Miller wrote:
>Stage 3: Adding Sensory Capabilities

Since the Factory, by necessity, must trust the kernel, it trusts the
kernel to provide capabilities which only allow the one way transmission of
information.  We call these capabilities, "sensory".  Since these are
trusted, they can be freely added to the factory.

Sensory capabilities don't provide durability.  The underlying object can
be deleted.