plugin-quality-tiers.md

Plugin Quality Tiers

Kelvin plugin manifests may declare quality_tier:

• unsigned_local
  • local development and experimentation only
  • no signature required
• signed_community
  • signed package expected (plugin.sig)
  • non-empty publisher required
• signed_trusted
  • signed package expected (plugin.sig)
  • non-empty publisher required
  • trust policy membership required for verification gates

Verification

scripts/kelvin-plugin.sh verify enforces tier-specific checks.

For trusted tier:

scripts/kelvin-plugin.sh verify \
  --package ./dist/acme.echo-1.0.0.tar.gz \
  --trust-policy ./trusted_publishers.json

Runtime Policy Tie-In

Installed plugin trust policy supports:

• revoked publishers
• plugin-to-publisher pinning

These controls are enforced by installed plugin loading (kelvin-brain).