PluginHost/PluginStore install downloads plugin DLLs from the registry and loads them full-trust with no SHA-256/signature verification (PluginHost.cs). Hardening requires the SchulyPlugins registry (index.min.json) to publish per-DLL hashes first, then the backend to verify before writing them to the plugins dir. Tracking issue - cross-repo design change, not auto-fixed. (Covers AC31.)
PluginHost/PluginStore install downloads plugin DLLs from the registry and loads them full-trust with no SHA-256/signature verification (PluginHost.cs). Hardening requires the SchulyPlugins registry (index.min.json) to publish per-DLL hashes first, then the backend to verify before writing them to the plugins dir. Tracking issue - cross-repo design change, not auto-fixed. (Covers AC31.)