The document doesn't specify anything about: - SEAL / UNSEAL permissions - GLOBAL / STORE_LOCAL_CAP permissions Would it be possible to clarify CHERI-generic (implementation-agnostic) semantics of these?