JavaSeal is a secure mobile agent kernel that provides a small and coherent set of abstractions for constructing agent applications. This paper describes the design of these abstractions and their implementation. We address the limitations of the Java security model and present a medium-sized e-commerce application that runs over JavaSeal.