Host

Plugin code never chooses a global cache directory or listener path. Instead, it submits an immutable artifact request or a local-listener request through its descriptor-bound activation context. Stackie verifies downloads before use, keeps cache entries in the plugin’s namespace, and owns listener collision and cleanup behavior.

Plugins receive only the host capabilities declared by their descriptor. Workloads cross the host boundary through the versioned Bridge admission contract, events use a bounded redaction-safe envelope, and inter-plugin calls name an exact provider, contribution, contract, and compatible semantic version. No capability exposes the daemon’s aggregate state.