Sophia Drossopoulou presented her research on Authority Attenuation Capabilities in the DOM at Splash 2017 OCap workshop. page 
Auth Attenuation in the DOM
the code - Node
Summary
Auth Attenuation in the DOM
Most postgraduate researchers presented capabilities fitted into new programming languages (not mainstream). My own observation even a well designed language fostered by Google such as Dart will take 10 years at least to gain adoption. And still not end up with developer adoption like JavaScript has. page .
Permissions and Authority...
Authority Attenuation this talk.
My takeaway after Sophia's talk. Mark S Miller has a kindred spirit dealing with capabilities in JavaScript, the reference language of the web browser page
YOUTUBE e6IvvFXZWdc