Start from the bounded process template.

Synchronized public edition. Canonical source: KFIF Enterprise backend documentation.

kfif-plugin-template/
├── plugin.json
├── README.md
├── LICENSE
├── src/connector.py
├── schemas/
├── tests/test_connector.py
└── tools/validate_local.py

• classification: development
• version: 0.1.0-dev
• no network
• no filesystem read or write
• no root, shell, subprocess or enforcement
• explicit authorization required
• disabled and non-production by design

• kfif-plugin-ipc/1.0 request and response shape
• canonical JSON serialization
• stable malformed-request errors
• deterministic projection transformation
• dependency-free local scaffold checks

• core database access
• license or trust-store access
• projection source paths
• shell or subprocess helpers
• network helpers
• privileged operations
• direct host publication

python tools/validate_local.py
python -m unittest discover tests

The template and create-plugin command do not generate or store signing keys, issue licenses, issue plugin authorizations, install packages or enable plugins. Production signing remains a separate publisher key-management responsibility.