<i>- In a capability system, Alice sends Bob her capability and then asks Bob to access it. There is no risk of confused deputy because there is no way for Alice to instruct Bob to use a capability that he has but Alice doesn&#x27;t.</i><p>I don&#x27;t get this part. Why not? Alice and Bob can still do what they can do, and if Alice is able to send messages to Bob then she can ask Bob to do that very thing. It wouldn&#x27;t be a confused deputy attack only in that Bob would have to go out of his way to be a confused deputy.