The object-capability model used by the project, mainly in the operating system.