AcceptedADR-011
HMAC Plugin Signing
Context
Unsigned plugins pose a supply-chain risk. Any file dropped in .claude/plugins/ could execute arbitrary code.
Decision
Each plugin ships a manifest.json signed with HMAC-SHA256. ADA verifies signature at load time using a workspace key.
Consequences
Unsigned plugins are rejected. Key rotation requires re-signing all plugins. Audit trail via signatures.