Verification levels

How far did we actually test a plugin? Verification is independent from security and health — a plugin can be L4-verified yet have a pending security audit. The rules below are public and always apply.

Found

current: 335

The GitHub repository is accessible, non-empty, and has a README. L1 is the minimum bar for appearing in the registry.

Structured

current: 1025

The manifest / package.json is valid and key fields are complete (name, license, description). The plugin is cataloged with categories and use cases.

Install spec

later phase

The install command is parsed from the manifest and the DSH version requirement is declared. "We know how to install it."

Install tested

later phase

The install command ran successfully inside an isolated container, with no dependency errors. "We actually installed it."

Feature tested

later phase

A smoke test of the plugin's core feature passed. "We actually ran it."

Semantics

• L3 = "we know how to install it"
• L4 = "we installed it, and it worked"
• L5 = "we ran its core feature"
• Verification is independent from Security and Health — the four dimensions never derive from each other.