A plugin-rich architecture

The platform exposes an API-centric, permission-checked plugin gateway. Storage, auth, and custom surfaces are plugins registered at compile time.

Workflow transitions from final states always fail by design, and plugin permissions are checked before any operation.