KeyKOS

A capability-based operating system nanokernel, originally built in-house at Tymshare in the early 1970s under the name GNOSIS and later commercialized, after McDonnell Douglas acquired Tymshare, by the spinoff company Key Logic, Inc. (founded by Ann Hardy, funded by Gene Amdahl) under the name KeyKOS. Matters to this vault as the system where Norman Hardy developed the capability-security framing behind the "confused deputy" problem, and as the second layer of the Hardy/Tymshare credit story: Ann Hardy is a named co-author of the system's own 1992 architecture paper, a credit that Wikipedia's current account of the system omits.

References

• claim-hardy-1988-named-confused-deputy-compiler-billing — Norman Hardy's later capability-security work (KeyKOS's nanokernel) develops the same designation-plus-authority principle as the 1988 confused-deputy paper.
• claim-ann-hardy-keykos-coauthor-and-key-logic-founder — Ann Hardy founded Key Logic and is a named co-author of KeyKOS's architecture paper.
• claim-wikipedia-keykos-page-omits-ann-hardy-developer-credit — Wikipedia's current KeyKOS article omits her from the developer credit.
• claim-ann-hardy-gnosis-original-design-credited-to-jordan-and-norman-hardy — Ann Hardy's own account of GNOSIS's original c. 1970 design team.
• Captures: 2026-07-09-hop-confused-deputy-ai-agents, 2026-10-30-who-was-ann-hardy-what-did-she-actually