Joe-E
From Erights
Joe-E is a subset of the Java programming language designed to support programming according to object-capability discipline.
The language guarantees additional security properties by placing restrictions on Java code, but does not modify programs or change their meaning. This allows programmers' existing knowledge of Java to be applied and existing compilers, debuggers, and other tools to be used with Joe-E programs.