how does a user get powers for use with contractStarter?

[dckc]

The test where starterSam starts the postalSvc starts by giving him namesByAddress. How would that happen? It seems like postalSvc is privileged... or is it? We could just put namesByAddress in vstorage. It's low-privilege.

What's a good path for it? put it near published.wallet? Perhaps published.walletNames?
Probably best not to make up a new name now. Better stick with published.namesByAddress.

[dckc]

permit named powers in contractStarter?

The namesByAddress case is easy because it's OK to publish.

But in general, supplying privateArgs in a contractStarter offer is infeasible: clients can only marshal objects that are on the board, which conflicts with them being private.

So perhaps use a permit system a la core-eval.

• subsume vstoreShop with a structured permit for vstorage nodes?
• avoid naming hazards using boardIDs again?