Capability Model
A classical access-control model in operating-system security that treats permissions as explicitly transferable but unforgeable tokens. Capabilities can only be passed from a parent process to a child process, and a parent cannot grant capabilities it does not itself possess, mathematically guaranteeing monotonically non-increasing privilege.
Timeline (last 90 days)
One approach to mitigating the security risks of self-modifying agents is to adopt a capability model, restricting code modification permissions to within a sandbox and requiring that modified code be approved by a verifier independent of the agent before it can be loaded.
Fine-grained permissions typically rely on technical means such as sandboxes, container file system mounts, and capability models, and these mechanisms increase toolchain complexity and slow down debugging.
All Facts (2)
One approach to mitigating the security risks of self-modifying agents is to adopt a capability model, restricting code modification permissions to within a sandbox and requiring that modified code be approved by a verifier independent of the agent before it can be loaded.
50%UnverifiedFine-grained permissions typically rely on technical means such as sandboxes, container file system mounts, and capability models, and these mechanisms increase toolchain complexity and slow down debugging.
50%