Allow downloaded code where necessary, and protect it. XN Challenges Provide direct access to stable storage. Provide protection of that stable storage. Provide this support efficiently. Associated with each type of meta-data.
Functions have no internal state, simply transform meta-data.
Different meta-data types represented by templates. Never create pointers to objects until the objects are initialized. During a move, do not delete old pointer before setting new pointer. Buffer Cache Registry Allows distrustful library file systems to share a cache. Replacement is on virtual pages, so applications can implement application-specific page replacement.