I'm looking for places where a capability system is exposed to users (not developers) in an understandable, well-designed way in non-experimental systems. Anyone have suggestions?

@dymaxion sandstorm had a capability system exposed to users. it's how you'd share access to your "grains", which is what it called isolated units of application data. https://sandstorm.io/how-it-works#capabilities

also, would you consider google docs' "allow access to anyone with link" sharing feature a capability system? i would. an opaque token that grants its bearer the chosen level of access - sounds like a capability!

How Sandstorm Works: Containerize data, not services

Take control of your web by running your own personal cloud server with Sandstorm.

@sa
Yeah, I'm thinking more about capabilities expressive enough to support their example case of "members of the finance team may not share documents outside of the organization" and then some. Still, that page was useful, thanks.