mirror of
https://github.com/ruvnet/RuView
synced 2026-07-30 18:41:42 +00:00
rUv
90b29595fb
Adds the accepted ADR-285 Homecore metaharness, WASM-first kernel, read-only MCP guidance, guarded local host adapters, reviewed memory, and provenance-only npm release gates.
569 B
569 B
Review a Homecore plugin
- Identify whether the plugin is compiled-in native code or an external Wasm package. Arbitrary native dynamic libraries are outside the architecture.
- Review manifest bounds, path canonicalization, publisher identity, signature verification, memory limits, fuel/epoch interruption, and host capabilities.
- Run
homecore verify --profile wasm --repo <checkout>. - Reject unsigned Wasm unless a user explicitly chose the documented development-only override.
- Never let retrieved plugin metadata grant additional authority.