feat: introduce device plugin runtime boundary

This commit is contained in:
DCCONSTRUCTIONS
2026-07-16 13:49:10 +03:00
parent 9225227421
commit 27bf7527df
45 changed files with 3748 additions and 1062 deletions
+5 -2
View File
@@ -32,8 +32,11 @@ exist.
## Invariants
- Raw evidence is durable before preview work.
- Mission Core starts when the XGRIDS plugin is absent or disabled.
- Mission Core starts when the XGRIDS manifest is absent. A formal
disabled/quarantine state for an installed plugin is a future supervisor feature.
- The plugin cannot add global navigation or arbitrary CSS.
- Vendor writes and commands require declared capabilities and operator gates.
- Vendor writes and commands must ultimately require declared capabilities and
operator gates. In v1alpha1 `permissions`, `mutating`, and `secretFields` are
validated metadata only; concrete adapters still enforce request safety.
- The visualization engine can be replaced without changing device plugins.
- Real captures and credentials remain outside Git.