Plugin Architecture

Plugin Registry Security: Signed Packages Beat a Trusted Gatekeeper

Plugin registry security doesn't need one trusted gatekeeper: EmDash signs every release with AT Protocol and sandboxes plugins by capability, not by review.