Robust and Compositional Verification of Object Capability Patterns