Have you looked at capabilities, like E, Mont-E and its descendants?
https://en.wikipedia.org/wiki/Object-capability_model
https://monte.readthedocs.io/en/latest/taste.html#cooperatio...
https://en.wikipedia.org/wiki/Object-capability_model
https://monte.readthedocs.io/en/latest/taste.html#cooperatio...