In 1973, John Reynold’s and James Morris’ Gedanken language retrofit
object-capability security into an Algol-like base. Today, there are active
These represent a variety of approaches, with different tradeoffs regarding legacy
compatibility, safety, and expressivity. In this talk I propose a taxonomy of these
approaches, and discuss some of the lessons learned to date.