Module plugin 

Host-owned contract for source-linked native plugins.

The opt-in plugins feature exposes a Rust trait boundary for trusted, in-process extensions. A plugin receives a borrowed PluginContext; it does not receive loose target/payload strings and cannot return findings or outcomes. The host owns authorization, transport, resource limits, cancellation, redaction, evidence provenance, and later verification.

This is a cooperative capability contract, not a sandbox. Native plugin code linked by a host can still use capabilities obtained outside this API.

Structs

PluginBudget

Immutable invocation limits enforced by crate::PluginContext.

PluginConfig

Host-owned registration configuration.

PluginContext

Borrowed capability boundary for one plugin invocation.

PluginExecutionRequest

PluginExecutionResult

Successful execution receipt. Failures are returned as PluginError.

PluginHttpRequest

Immutable request passed to the host-owned broker.

PluginHttpResponse

Bounded response returned by a host-owned request broker.

PluginMetadata

Consistent metadata snapshot from one registry entry.

PluginObservation

Untrusted observation draft accepted by the host recorder.

PluginRegistry

PluginUsage

Usage receipt for one completed plugin invocation.

SecretRedactionPolicy

Conservative redactor for common secret assignments plus host literals.

Enums

PluginCategory

Informational plugin categories; these do not assign severity or findings.

PluginError

Typed plugin-boundary failures.

PluginHttpMethod

Bodyless request methods exposed through the host broker.

Constants

PLUGIN_API_VERSION

Source-level plugin API version supported by this host.

Traits

Plugin

Extension contract for source-linked native plugins.

PluginRedactionPolicy

Host redaction policy applied before any plugin observation becomes evidence.

PluginRequestBroker

Host-owned transport capability used by plugin contexts.