Plugins & Supply Chain

Governed plugin lifecycle: signed submissions, vulnerability scanning, maker-checker certification and publishing, scoped installations, upgrades/rollbacks, and security advisories. Every action is written to the immutable audit trail.