capability-based security

A capability-based microkernel written in SPARK Ada and formally verified with gnatprove, with a thin C SDK for building services and distribution components.

Jo is a secure programming language designed to help catch prompt injection and other unsafe behavior at compile time by enforcing explicit capability boundaries. The repository shows the language’s security model, code examples, installation flow, and current project status.