Plugins
Plugin boundary
Plugins extend Appaloft through explicit capabilities. User docs should explain compatibility, permissions, and sandbox assumptions.
Safety assumptions
Plugin docs should explain what the plugin can read, what it can change, how to disable it, and what users see when it is incompatible.