# Results for "capability based security models"

> AI-ranked search results for `capability based security models` on awesome-repositories.com — ordered by an LLM for relevance, best match first. 117 total matches; showing the top 7.

Explore on the web: https://awesome-repositories.com/q/capability-based-security-models

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/capability-based-security-models).**

## Results

- [ponylang/ponyc](https://awesome-repositories.com/repository/ponylang-ponyc.md) (6,133 ⭐) — Pony is an open-source, actor-model, capabilities-secure, high performance programming language
- [webassembly/wasi](https://awesome-repositories.com/repository/webassembly-wasi.md) (5,699 ⭐) — The WebAssembly System Interface is a standardized set of APIs that allow WebAssembly modules to interact with operating systems in a portable and platform-independent manner. It provides a portable runtime abstraction that separates high-level system calls from low-level host implementations to ensure compatibility across different operating systems.

The project utilizes a component-based module system to link independent binary modules through shared interfaces, removing the requirement for a single monolithic binary. It employs a cross-language interface definition to provide a portable ty
- [sel4/sel4](https://awesome-repositories.com/repository/sel4-sel4.md) (5,583 ⭐) — seL4 is a formally verified microkernel whose C implementation is backed by machine-checked mathematical proofs of correctness, confidentiality, integrity, and availability. It enforces strict isolation between processes through hardware-enforced address space separation and a capability-based access control system, where each process holds explicit rights only to the resources it has been granted. The kernel exposes hardware resources through a minimal API of system calls that manage threads, address spaces, and inter-process communication, with synchronous IPC supporting sender-identifying b
- [lunatic-solutions/lunatic](https://awesome-repositories.com/repository/lunatic-solutions-lunatic.md) (4,867 ⭐) — Lunatic is a WebAssembly runtime and concurrent process manager that implements an Erlang-inspired model of lightweight concurrency and fault tolerance. It functions as a distributed actor system where isolated processes communicate via message passing across a network of linked nodes.

The system utilizes a WebAssembly sandbox environment to isolate memory and restrict system call permissions for each individual process. This capability-based security model ensures that processes are sandboxed to safely execute untrusted code.

The platform provides a fault-tolerant supervision tree for hiera
- [tauri-apps/tauri](https://awesome-repositories.com/repository/tauri-apps-tauri.md) (107,946 ⭐) — Tauri is a cross-platform framework for building desktop applications that combine web-based user interfaces with a memory-safe systems-language backend. It functions as a secure runtime that hosts web content within native windowing containers, allowing developers to leverage existing web technologies while maintaining high-performance native logic. By compiling applications into small-footprint, platform-specific binaries, the framework avoids bundling heavy runtime environments, resulting in lightweight executables.

The project distinguishes itself through a capability-based security model
- [tock/tock](https://awesome-repositories.com/repository/tock-tock.md) (6,351 ⭐) — Tock is a secure embedded operating system and microcontroller kernel designed to isolate untrusted applications and drivers. It functions as a memory-safe process isolator that uses a combination of hardware memory protection and language-level type safety to execute mutually distrustful applications on bare metal.

The system distinguishes itself through a hardware abstraction layer that decouples high-level components from specific microcontroller implementations using standardized traits. It further employs a virtualization layer to allow multiple independent software components to share a
- [sandstorm-io/sandstorm](https://awesome-repositories.com/repository/sandstorm-io-sandstorm.md) (7,037 ⭐) — Sandstorm is an open-source platform that packages and runs web applications in security-hardened sandboxes on a personal server, functioning as a self-hosted web app operating system. It provides a curated app store where users discover and install sandboxed web applications with one-click ease, while each application runs in an isolated container that uses Linux kernel security features to separate it from the host and other apps. The platform includes a centralized authentication layer so users sign in once and gain access to all installed applications without managing separate accounts per