On 2009-12-16, at 11:24 AM, Bert Freudenberg wrote:

> On 16.12.2009, at 18:43, Eliot Miranda wrote:
> 
>> In the bright rosy future concoct a convincing story around capabilities or mirrors which carefully modulate use of these facilities so they can't be misused.
> 
> That's exactly my point - I don't see how you could do a safe capability-based system with those primitives that can work around any encapsulation and hence can circumvent any capabilities.

Just make the primitives refuse to violate encapsulation for any receiver that's not a Mirror. 

Colin