Harmony

Harmony as an Object-Oriented Operating System
Ion is a key concept in the design of Harmony programs. The only interface to a task instance, once created, is message passing. Access from the outside is permitted only when a task explicitly performs a Receive operation.
http://citeseer.ist.psu.edu/mackay-harmony.html