Construction Provider Boundary

Native Authority

• Treat an installed manifest or source packet as no provider grant.
• Require matching published host authority before enabling construction writes.
• Require the actual native producer before enabling construction writes.

Owner Approval

• Release an append only through its content-bound native owner callback.
• Never accept agent-written approval.

Retained Uncertainty

• Preserve uncertain attempts.
• Never resend automatically.
• Never use a direct Sheets fallback.

Private Configuration

• Keep credentials out of public plugin content.
• Keep the configured destination out of public plugin content.