Agent OS · Component · signed-plugin-registry
Signed plugin registry and trusted installation
What it does
Serve package discovery/publication/moderation/revocation, sign registry records and verify packages during local installation.
Core pattern
Signed extension registry + installation verification and revocation
- Input
- Plugin packages and signed metadata
- Output
- Registry records, package downloads and verified installation results
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| package_id | — | — | — |
| version | — | — | — |
| trust_roots | array | [] | — |
| approved_origins | array | [] | — |
| review_decision | — | — | — |
Maturity and limits
HTTP server/router/storage tests, append-only audit implementation and install/verifier tests. Phase 2: source paths and implementation inspected statically; tests and external integrations were not executed. Maturity rates repository implementation, not a verified production deployment.
No root reuse license found; bundled skills/plugins and dependencies carry separate license terms. Signing keys and package execution trust require careful custody.
2 sentences citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- EnergyTransferable use
For offline delivery and recovery preparation for site operations software, use signed extension registry followed by installation verification and revocation.
- Business & general servicesTransferable use
Support “Check tool provenance and licenses” with signed extension registry followed by installation verification and revocation.
Skills pack
Reference pack with offline tests
Download · 18KBSHA-256 880dc7b188b5e7b77097f95110dfa06d5dbc275c1f2a7b6d32ba3f03d98129fe
Related components
-
Scoped browser automation and research sessions
Bounded browser scope + page action evidence
Working 1 pipeline -
External connector OAuth, PKCE and encrypted session lifecycle
Scoped connection consent + credential refresh and revocation
Working 1 pipeline -
Governed external tool and search adapters
Schema, permission and budget checks + evidenced tool calls
Working 2 pipelines -
Dependency license policy and metadata audit
Dependency metadata comparison + license rule review
Working 1 pipeline