A Meadowcap capability is an unforgeable ticket naming access mode, namespace, area and holder key, checkable by any peer alone.

It replaces accounts, access lists and the server that would hold them.

Meadowcap has no accounts and no access lists. It has tickets. A capability is an unforgeable ticket.

The ticket says four things. Read or write. Which namespace. Which area. And who holds it.

The area is a room, a shelf prefix, and a time range. Everything inside that is allowed. Nothing outside.

The holder is a public key. To use the ticket, you sign with the matching secret key.

Any peer can check a ticket on its own. There is no server to ask.

Check yourself. What four things does a capability say?