Thanks! It can be file and url level granular, there’s a capabilities page that mentions that[1]. Caps and needs are the two sides. A module function needs File.write, and you can grant a narrower cap to a single folder or file.
reply[1] https://march-lang.org/docs/capabilities/#choosing-the-right...