>>17678267Assuming by pledge + unveil you mean a scheme where access is based on cryptographic commitments/pledges that are only revealed (βunveiledβ) when the required conditions are satisfied:
BellβLaPadula/MAC: primarily enforce static label-based information flowβe.g. no read up, no write down.
Pledge + unveil: can make authorization conditional and cryptographically verifiable: a party commits to something first, and only later reveals the information/key/proof needed to obtain access.
This can give better support for dynamic, decentralized, or multi-party policies, rather than requiring everything to fit a fixed security lattice.
It can also provide stronger auditability/non-repudiation because the pledge and subsequent unveiling can be cryptographically tied together.
So the short version is: MAC/BLP answers βis this subject allowed to access this label?β; pledge+unveil can answer βhas the required conditions/proof been satisfied before revealing the protected capability?β
That said, it isn't universally better: BLP/MAC provides a well-understood formal guarantee for confidentiality, while pledge+unveil would need its own formal security proof and threat model.