Capabilities

A plugin descriptor requests only the host capabilities it needs. Package code receives an immutable activation context containing that exact grant set; it cannot add authority or choose another plugin identity.