capabilities

Systems language with linear types and capability-based security.

Cap'n Proto library and code generator for Go

Container introspection tool. Find out what container runtime is being used as well as features available.

Endo is a distributed secure JavaScript sandbox, based on SES

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

One capabilities.yaml wires skills, tools, rules, sub-agents, MCP servers, and plugins into Cursor, Claude Code, Codex, Windsurf, GitHub Copilot, and 30+ other AI coding agents

📝 Online editor providing collaborative editing in really real-time using CRDTs and IPFS.

Awesome Object Capabilities and Capability Security

A better alternative to sudo(-rs)/su • ⚡ Blazing fast • 🛡️ Memory-safe • 🔐 Security-oriented

CloudABI's standard C library

🗝️🐝✨ Rust workspace for Keyhive and related crates

Extensional capabilities and deriving combinators

The Disco Discus Compiler

Newspeak is a live object-capability language in the Smalltalk tradition

This repository contains the CHERI extension specification, adding hardware capabilities to RISC-V ISA to enable fine-grained memory protection and scalable compartmentalization.

A pure-Rust library to work with Linux capabilities

Libcap-ng is a library for Linux that makes using posix capabilities easy.

Contract-driven runtime for portable business capabilities — spec-governed, WASM-first, composable across browser, edge, cloud, and AI.

Single-address-space capability-based nanokernel

Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.