At 12:44 AM 12/18/98 -0800, Mark S. Miller wrote:
>Stage 3: Adding Sensory Capabilities
Since the Factory, by necessity, must trust the kernel, it trusts the kernel to provide capabilities which only allow the one way transmission of information. We call these capabilities, "sensory". Since these are trusted, they can be freely added to the factory.
Sensory capabilities don't provide durability. The underlying object can be deleted.