@hipsterelectron I notionally don't disagree. This is essentially an object capability design.

My intention was to say that an extremely simple extension to the existing model that unlocks a lot is to just abstract one level further than "an entire volume" and that in particular directories get you pretty far with no changes needed for the overwhelming majority of software.

That said, there's much more sophisticated things like you describe that can also be pursued