Least privilege, checked by a compiler

In Staal, every action requires an explicit, bounded capability granted by the host app and verified by the compiler and runtime, preventing AI agents from misu