feat(plugins): add runtime handshake boundary

README.md

@@ -25,13 +25,15 @@ unchanged.
 
 Plugin SDK v0alpha2 now provides executable, vendor-neutral identity, session,
 operation, runtime-action, stream, evidence and compatibility contracts. Every
-backend action crosses immutable SDK `RuntimeActionInvocation` and
-`RuntimeActionResult` validation in the actual dispatcher hot path. The meanings
-remain a local experimental vocabulary rather than a mutation of NODE.DC
-Platform Ontology. The device process is still transitional and in process: it
-uses an explicitly injected K1 normalizer to produce transport-neutral local
-consumer views; portable SDK stream envelopes, process isolation, durable
-operations, multi-device routing and the remote Edge split remain later gates.
+backend runtime must now pass a versioned descriptor/handshake against its
+manifest before actions are admitted. Every action then crosses immutable SDK
+`RuntimeActionInvocation` and `RuntimeActionResult` validation through a
+replaceable runtime transport seam. The meanings remain a local experimental
+vocabulary rather than a mutation of NODE.DC Platform Ontology. The current
+transport is deliberately in process: it uses an explicitly injected K1
+normalizer to produce transport-neutral local consumer views; portable SDK
+stream envelopes, process isolation, durable operations, multi-device routing
+and the remote Edge split remain later gates.
 
 The current runtime cannot read K1 firmware automatically. It keeps the exact
 profile inactive until the operator explicitly attests firmware `3.0.2` and
@@ -245,6 +247,9 @@ present.
 - [Vendor-neutral live observation sources](docs/adr/0006-vendor-neutral-observation-sources-and-live-only-timeline.md)
 - [K1 camera preview copy-remux gateway](docs/adr/0007-k1-camera-preview-copy-remux-gateway.md)
 - [Durable observation sessions and workspace layout](docs/adr/0008-durable-observation-sessions-and-workspace-layout.md)
+- [Device-plugin observation runtime and K1 extraction](docs/adr/0009-device-plugin-observation-runtime-and-k1-extraction.md)
+- [Plugin-owned frontend device workflows](docs/adr/0010-plugin-owned-frontend-device-workflows.md)
+- [Laboratory plugin runtime handshake and transport seam](docs/adr/0011-laboratory-plugin-runtime-handshake-and-transport-seam.md)
 - [Redacted live lab report](docs/lab/001_K1_LIVE_MQTT_20260715.redacted.md)
 - [Session manifest schema](schemas/session-manifest.schema.json)
 - [Reference input provenance](docs/reference/README.md)