GW AdvOS: Capability-based OS design

I talk about a very simple set of resources that are sufficient for safely abstracting most of the underlying kernel resources. This provides a foundation for isolation, modularity, and the definition of higher-level system abstractions.