A technology used to enforce capability addresses to address memory safe issues in C, C++. Defines what memory CPU is able to access