Connector Policy

This document is a draft pending review by qualified counsel before publication. It describes product behaviour and is not legal advice.

Declared capabilities

A connector must declare its read and write capabilities, authentication type and required scopes. The runtime enforces the declaration.

Request only the scopes the declared capabilities need.

Credentials are held in the credential vault. A connector must not transport secrets outside the paths the platform provides.

Write operations must be idempotent where the target allows it and must surface conflicts rather than overwriting newer revisions.

Catalog entries show a trust level and availability. A connector that is degraded or unavailable is shown as such.

A connector that breaches this policy can be delisted, and installed instances can be disabled.