Capability-based security lost to identity-based access control in the 1970s, but agent systems keep rediscovering why it was right.

How Unix permission bits designed for people at terminals became container security, and why agents expose the missing concept of mandate.

Java's applet sandbox eroded from product pressure rather than attacks — its own designers loosened containment so the code could do its job. That pattern is recognizable in agent containment today.