capability-based-security

Cadence: the resource-oriented smart contract programming language of the Flow network. Capability-based security, type safety, and move semantics

A real operating system written from scratch in Embedded Swift for 64-bit ARM: MMU-isolated processes, capability-based security, an in-kernel pure-Swift TCP/IP stack — and it runs nginx, Node.js and SQLite on bare metal.

Sandboxed plugin VM with typed capabilities, deterministic replay, and time-travel debugging — written in Rust.

Ephemeral, stateless, capability-bound execution for untrusted AI and agent-generated code.

Namespace-bounded containment for AI agents, built on a 64-bit Inferno® OS. 9P everywhere, formally verified isolation, 15–30 MB of RAM, MIT licensed.

Decentralized OS for multi-tool agent swarms.

AI agent sandbox prison runtime with a local-first desktop app + CLI. Chat with any model (Claude, OpenAI, Groq, Ollama, LM Studio); every action passes Intent → Proposal → Commit through signed capability writs, risk-gated approvals, and a replayable hash-chained ledger. Watch it think in the Mind graph. Cognition proposes; the runtime governs.

Compile-time capability-based security for Rust

The home of the Cadence website

Zero-trust, capability-based Rust microkernel targeting formal verification. Tri-arch (x86_64 / AArch64 / RISC-V). Sovereign and generative: no telemetry, user owns keys and data. Early-stage — see STATUS.md. Inspired by seL4, Hubris, and Redox.

A constraint-native programming language — capability-typed effects, 0.2 research preview

The Deed programming language. Built for code that agents write and humans review.

A language for safe, universal spatiotemporal composability (Cordis paradigm) and orchestration.

Self-hosted systems programming langauge with an effect system and compile-time capability enforcement

WasmVault is a security-first package manager and runtime sandbox in Rust that enforces zero-trust, capability-based security and real-time syscall interception for untrusted WebAssembly (WASI) plugins — starting in under 5ms with less than 16MB of overhead.

Cryptographic impact-bounded authorization leases for disconnected hybrid-infrastructure control planes

Agent-native OS with capability-based security, semantic IPC, and first-class GPU. Offline-first. Preview on Windows/Linux (NVIDIA).

A quantum-aware microkernel OS — capability-based IPC, real QPU entropy at boot, holographic kernel memory. Boots in your browser.

Aster RPC -- peer-to-peer RPC framework with identity in the connection. Machines authenticate to machines, on behalf of users. Built on iroh QUIC + Apache Fory + capability-based credentials.

An open source RISC-V operating system in Rust — capability-based microkernel, userspace services, and a graphical desktop in QEMU.