Plugins
Sandboxed WASM lifecycle plugins, deny-by-default.
- What a plugin can doLifecycle events, and advisory versus enforcing.
- Install a plugininstall, list, show, uninstall, and where packages come from.
- Check a plugin before you trust itvalidate, verify, and publisher trust.
- Bind a plugin to an eventbind, unbind, grants, filters, and what enforcing mode blocks.
- Secret scanningThe default-on plugin, the three-way prompt, and the escapes.
- Write your own pluginThe manifest, the sandbox contract, and testing.
- A plugin will not load or runReading the TVO-PLUGIN codes, and plugin doctor.
- Every lifecycle event, and which ones fireAll twenty-four event names, what each means, and whether it has a firing site today.
- The plugin manifestEvery field, the two integrity forms, and the mistakes that fail validation.
- What a plugin is allowed to touchThe capability model, the intersection rule, and the sandbox ceilings.
- Plugin policy on a ForgeOrganisation allow and deny lists, trusted attesters, and required plugin checks.
- Server-side plugin executionThe trusted runner on a hosted Forge, and how it differs from running locally.