[tahoe-dev] The big tahoe problem

[James A. Donald]

The data loss bug, that a directory can be moved into itself or a 
subdirectory of itself, is a particular case of a more general problem:  
That a tool for creating and manipulating capabilities is of limited 
value unless it is part of a system for managing capabilities.  It 
should not be possible to create a capability, except you create it in a 
place you can subsequently access from a root capability, should not be 
possible to create a capability except you create it somewhere.