Split Capabilities: Making Capabilities Scale

[Ken Kahn]

Alan wrote:
>
> I don't really care if it's objects as long as I can reason about the
> system.  Hidden side effects make reasoning difficult if not impossible.
I
> have a problem with facets in that interfaces not in the facet appear to
me
> to be hidden side effects.  Objects, at least pure objects, don't have
side
> effects, but any other such system would do as well for me.
>

Given the entire source code in E or some concurrent logic programming
language, I doubt that this facet style of programming prevents formal
reasoning about the behavior of the entire system. But in an open system
where programs communicate over trust boundaries there are inherent
limitations about how much you can reason about the system behavior. Whether
it uses facets or not.

I suspect there are some unspoken assumptions about the overall context in
this discussion of facets. Who is hiding side effects from who?

Best,

-ken