Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Routing of communications to group member(s) where group membership is identified by physical status. A computing system detects a communication that identifies targets of the communication at least in part by physical status. The system responds by identifying at least partial membership in a group that is identified by the physical status identified in the communication, and then dispatching the communication to at least one member of the members of that group. The identity of the members of the group may change dynamically as the physical status of particular physical entities changes over time. Accordingly, a user may communicate to individuals based on physical status, rather than identify any particular individual or status group. The communication may be directed to all members of the group. Alternatively, the communication may be initially directed towards a subset of the group, with the communication being conditionally later broadened.

Abstract: Routing of communications to group member(s) where group membership is identified by physical status. A computing system detects a communication that identifies targets of the communication at least in part by physical status. The system responds by identifying at least partial membership in a group that is identified by the physical status identified in the communication, and then dispatching the communication to at least one member of the members of that group. The identity of the members of the group may change dynamically as the physical status of particular physical entities changes over time. Accordingly, a user may communicate to individuals based on physical status, rather than identify any particular individual or status group. The communication may be directed to all members of the group. Alternatively, the communication may be initially directed towards a subset of the group, with the communication being conditionally later broadened.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Routing of communications to group member(s) where group membership is identified by physical status. A computing system detects a communication that identifies targets of the communication at least in part by physical status. The system responds by identifying at least partial membership in a group that is identified by the physical status identified in the communication, and then dispatching the communication to at least one member of the members of that group. The identity of the members of the group may change dynamically as the physical status of particular physical entities changes over time. Accordingly, a user may communicate to individuals based on physical status, rather than identify any particular individual or status group. The communication may be directed to all members of the group. Alternatively, the communication may be initially directed towards a subset of the group, with the communication being conditionally later broadened.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Facilitating navigation of a computer-navigable graph of sensed features that were gathered by recognition or estimation of one or more features of physical entities that were sensed over time by sensor(s) within a physical space. The computer-navigable graph includes multiple nodes including multiple signal segment nodes and multiple feature nodes. Each of at least some of the signal segment nodes evidence feature(s) represented in feature node(s). Navigation is facilitated by, for each of multiple signal segment nodes, identifying relationship(s) between the corresponding signal segment node and other node(s) of the graph. At navigation time, when a user navigates to the corresponding signal segment nodes, a visualization of any detected relationship may be rendered to the user. When the user interacts with the rendering in such a way as to select the relationship, the user is navigated to the other node.

Abstract: The setting of physical condition(s) upon which to perform one or more identified actions. This is done via the use of a physical graph that represents state of one or more physical entities within a physical space and observed by sensors. The system monitors the physical graph for the occurrence of the physical condition. If the physical condition occurs, then one or more identified actions are performed. The identification of such actions may occur in advance of the detection of the physical condition and/or may be deferred until the physical condition occurs. The physical condition may be a single physical condition or may be a more complex set of physical conditions. Such actions could include actions such as presenting information to the user, and sending communications out to others. However, the actions could even include physical actions.

Abstract: Facilitating navigation of a computer-navigable graph of sensed features that were gathered by recognition or estimation of one or more features of physical entities that were sensed over time by sensor(s) within a physical space. The computer-navigable graph includes multiple nodes including multiple signal segment nodes and multiple feature nodes. Each of at least some of the signal segment nodes evidence feature(s) represented in feature node(s). Navigation is facilitated by, for each of multiple signal segment nodes, identifying relationship(s) between the corresponding signal segment node and other node(s) of the graph. At navigation time, when a user navigates to the corresponding signal segment nodes, a visualization of any detected relationship may be rendered to the user. When the user interacts with the rendering in such a way as to select the relationship, the user is navigated to the other node.

Abstract: Routing of communications to group member(s) where group membership is identified by physical status. A computing system detects a communication that identifies targets of the communication at least in part by physical status. The system responds by identifying at least partial membership in a group that is identified by the physical status identified in the communication, and then dispatching the communication to at least one member of the members of that group. The identity of the members of the group may change dynamically as the physical status of particular physical entities changes over time. Accordingly, a user may communicate to individuals based on physical status, rather than identify any particular individual or status group. The communication may be directed to all members of the group. Alternatively, the communication may be initially directed towards a subset of the group, with the communication being conditionally later broadened.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Hosting one or more web applications and providing local device capabilities to the one or more web applications. One or more second applications are hosted within a first application. A call from the one or more second applications is performed to a device abstraction layer of the first application. Such a performed call comprises a request to access a capability of a local device. Upon receiving the call, the device abstraction layer verifies that the performed call is permitted. In response to the first application verifying that the performed call is permitted, the one or more second applications is permitted to access the capability of the local device that was requested.