Delegations + plain data handed to the launched app. $cap:'dir'|'file'
markers (capDir/capFile, exported from ./tasks) are resolved against the
launcher's OWN grants and minted as attenuated, ro-by-default chroots (§5) —
you can only delegate what you already hold. Everything else is plain data.
Delegations + plain data handed to the launched app.
$cap:'dir'|'file'markers (capDir/capFile, exported from./tasks) are resolved against the launcher's OWN grants and minted as attenuated,ro-by-default chroots (§5) — you can only delegate what you already hold. Everything else is plain data.