Identifies the problem (delegation)

[Alan Karp]

but doesn't know the solution exists.

https://sphericalcowconsulting.com/2025/06/27/delegation-part-two/

--------------
Alan Karp

[William ML Leslie]

On Fri, 9 Jan 2026 at 08:43, Alan Karp <alan...@gmail.com> wrote:

but doesn't know the solution exists.

https://sphericalcowconsulting.com/2025/06/27/delegation-part-two/

It's one thing to know (abstractly) that capabilities solve the problem, I think what often ties people up is how to get started.  There aren't a lot of projects that we can point at to say, "this is how you do capabilities in a web service", "in a modern mobile app", or "in an agentic system".  Like most of you, I've tried building examples a few times and always get snowed under by other work, I just wanted to say that I appreciate efforts to make secure systems an accessible topic.

--

William ML Leslie

[William ML Leslie]

On Fri, 9 Jan 2026 at 09:55, William ML Leslie <william.l...@gmail.com> wrote:

It's one thing to know (abstractly) that capabilities solve the problem, I think what often ties people up is how to get started.

As in, they don't know it's possible, let alone how to do it.  Besides, I already have a big C# / Java EE / Rails / Django / PHP / React / Flutter / Node / whatever app with a load balancer that logs all URLs in an enterprise that does "safe url" cleaning, how do I get started?

--

William ML Leslie