Plugins

Plugins are an owner-only extension surface. They are outside the human–agent collaboration loop: the agent does not execute third-party plugins in this alpha.

What exists

mdBoard can declare, verify and lock plugin manifests. It does not execute them. A verified plugin is not sandboxed.

Manifest

[plugins.adoc]
kind = "renderer"          # check | renderer
command = "tools/mdboard-render-adoc"
version = "0.1.0"
sha256 = "…64 hex characters…"
enabled = false
optional = false
network = false
timeout_seconds = 30
capabilities = []

• command is absolute or relative to the board root.
• No discovery from PATH; no auto-install.
• sha256 is mandatory and must match.
• Only the owner enables a plugin.

Verify

mdboard plugin list
mdboard plugin verify

verify returns exit code 1 for a missing command, a digest mismatch or a missing/stale lock entry. It never executes the plugin.

Lock

mdboard --actor owner plugin lock

The lock records owner approval in mdboard-plugins.lock. A locked plugin that is missing from mdboard.toml is a failure.

Trust boundary

• The manifest digest is the identity.
• The owner lock is the approval.
• The plugin runs outside mdBoard’s model; the agent must not treat it as a trusted part of the board.
• Execution remains disabled until a real sandbox exists.

Next

• Configuration
• Security