Documentation rendue
Cette page rend le Markdown et Mermaid du module directement depuis la source publique de documentation.
Overview#
The Plugin domain provides an extensibility framework with plugin registration, versioning, sandboxed execution, capability-based security, and a full marketplace system. It enables third-party developers to extend platform functionality while maintaining strict security through code signature verification and capability grants.
Key Features#
- Plugin lifecycle management from draft through review, publication, deprecation, and archival
- Semantic versioning with changelog tracking and manifest support
- Capability-based security model with fine-grained permission grants
- Sandboxed execution with isolated runtime, resource limits, and timeout controls
- Full marketplace with listings, pricing models (free, paid, subscription), and user reviews
- Code signature verification for integrity assurance
- Multiple execution triggers including manual, scheduled, and event-based
- Input/output payload management with stdout/stderr capture for debugging
- Time-limited capability grants with expiration and revocation support
- Install tracking and usage metrics for marketplace analytics
Use Cases#
- Enabling third-party developers to build and distribute platform extensions through a marketplace
- Running sandboxed analysis plugins on evidence with controlled capability access
- Managing capability grants for plugin execution with time-limited permissions
- Publishing versioned plugin updates with changelog documentation and review workflows
Integration#
The Plugin domain connects with external integration frameworks, webhook systems, audit logging, and feature flag management.
Last Reviewed: 2026-02-05