How plugins stay safe
Signatures, sandboxes, limits, and rollback.
Signed
Every plugin is signed with its publisher's Ed25519 key. Varial re-hashes the files before it trusts them.
Sandboxed
Varial picks where a plugin runs: a dedicated worker, a sandboxed frame, or an isolated sandbox. The plugin cannot choose.
Limited
Each call has limits on time, memory, and rate. A call that breaks them is cut off, and repeated failures turn the plugin off.
Undoable
Plugin changes go through normal history, labeled with the plugin that made them. Failed calls never reach your file.
Recoverable
A bad update is quarantined and your working version stays. Safe mode starts Varial with only built-in code.
Was this helpful?