pub type CapabilityGeneration = u64;Expand description
Capability IDs are never recycled within one VM/session generation, so the per-capability generation remains one. The session generation is part of every validated identity and distinguishes separate VM lifetimes.