Future We believe the basic semantics for unveil() are sane. Full upward traverse to find covering vnode unveil (makes for simpler unveils) More tweaking for "real" program behaviour. Handle inheritance across exec() - as pledge() exec promises also evolves. Currently preserved across fork(), but not exec()