python-plugins
Fail-closed admission for Python plugins: inspect inert manifests and refuse unapproved code before import. Artifact trust and Windows isolation are active alpha work.
