>>Tomuus+(OP)
Yes exactly Cap'n Web for RPC. On top of that:
1. Constrained SQL DSL that limits expressiveness along defined data boundaries
2. Constrained evaluation -- can only compose capabilities (references, not raw data) to get data flow tracking for free