USING CAPABILITIES INSTEAD OF TRUSTING 3RD PARTY CODE

Summary from the TLDR InfoSec newsletter

CHERI capabilities can restrict third-party code's memory access by creating read-only references with explicit bounds. Rather than trust docs, the author uses hardware enforcement to prevent the MQTT library from keeping or modifying memory references. This removes trust requirements for external code by using CPU-level controls instead of relying on documentation or audits.