Module capability 

One generation-aware registry for native and kernel-backed capabilities.

Structs

CapabilityLease

CapabilityRegistry

CapabilitySnapshot

PendingCapability

Enums

CapabilityBackend

CapabilityError

CapabilityKind

CapabilityLifecycle

Type Aliases

CapabilityGeneration

Capability IDs are never recycled within one VM/session generation, so the per-capability generation remains one. The session generation is part of every validated identity and distinguishes separate VM lifetimes.

CapabilityId

SessionGeneration