Early capability-based OS kernel for multiprocessing environments, gave fine-grained protection. Goals: universal applicability, absolute reliability.