@naugtur mentioned durable interruption and continuation as a capability-design topic and recalled Endo and ocap-kernel exploring different approaches. Treat that as a research lead to verify, rather than an established description of either project's current behavior.
The roadmap already marks this evaluation complete, and the deferred-capabilities document states that no concrete approval, authentication-handoff, or cross-process resume workflow is currently defined. This issue captures the additional external design input without committing to implementation or undoing that decision.
If this capability is revisited, identify the actual application workflow, compare the relevant Endo and ocap-kernel approaches, and document capability granularity, continuation identity, side-effect semantics, and the separate threat model required. Update the decision with relevant findings; keeping the feature deferred remains a valid outcome.
References:
Based on review feedback from @naugtur, shared in a discussion with the maintainer.
@naugtur mentioned durable interruption and continuation as a capability-design topic and recalled Endo and ocap-kernel exploring different approaches. Treat that as a research lead to verify, rather than an established description of either project's current behavior.
The roadmap already marks this evaluation complete, and the deferred-capabilities document states that no concrete approval, authentication-handoff, or cross-process resume workflow is currently defined. This issue captures the additional external design input without committing to implementation or undoing that decision.
If this capability is revisited, identify the actual application workflow, compare the relevant Endo and ocap-kernel approaches, and document capability granularity, continuation identity, side-effect semantics, and the separate threat model required. Update the decision with relevant findings; keeping the feature deferred remains a valid outcome.
References:
Based on review feedback from @naugtur, shared in a discussion with the maintainer.