It has a separate address space for each object? That seems unlikely. Is it not pretty much a software implementation of CHERI?