Package
Stackie packages select plugin crates at build time. The host validates each crate’s shared SDK descriptor, applies administrator and subscription policy, and only then activates the package with its declared capabilities. Package inclusion never bypasses runtime entitlement.