We propose and study StkTokens: a new calling convention that provably enforces well-bracketed control flow and local state encapsulation on a capability machine. The calling convention is based on linear capabilities: a type of capabilities that are prevented from being duplicated by the hardware. In addition to designing and formalizing this new calling convention, we also contribute a new way to formalize and prove that it effectively enforces well-bracketed control flow and local state encapsulation using what we call a fully abstract overlay semantics.

中文翻译：

---

StkTokens：使用线性功能强制实施完善的控制流和堆栈封装

我们提出并研究 StkTokens：一种新的调用约定，可证明在能力机器上强制执行良好的控制流和本地状态封装。调用约定基于线性能力：一种防止被硬件复制的能力。除了设计和形式化这个新的调用约定之外，我们还提供了一种新的方法来形式化和证明它使用我们所谓的完全抽象的覆盖语义有效地执行了良好的控制流和本地状态封装。