Abstract: Systems and methods are directed to capability-restricted system control. In some embodiments, during the instantiation of a requesting entity in a system, the requesting entity is granted a specific set of capabilities. In these examples, capabilities used by a responding entity to fulfil a request from a requesting entity are limited to the capabilities granted the responding entity by the requesting entity. When granting the capabilities to the responding entity, the granted capabilities are restricted from use by the requesting entity. Once the request is fulfilled by the responding entity, the restrictions on the capabilities are removed, allowing the requesting entity to use those capabilities in a further request.