GW AdvOS: Capability Delegation and Revocation

Microkernel systems must enable means to constrain the set of resources each protection domain has access to, and to specialize different protection domains around access to specific resources. Delegation and revocation are an essential part of that, and we discuss the means of exporting delegation and revocation policy to user-level in Composite.