ta-extension

Plugin trait definitions for the Trusted Autonomy daemon extension surface.

These traits define the boundary where SA (Secure Autonomy) and other enterprise plugins connect to extend TA with remote access, authentication, shared workspaces, and external review queues.

TA ships local-first default implementations for every trait. Enterprise capabilities (OIDC auth, shared workspace storage, external review queues, SIEM audit sinks) are implemented by external plugins that register against these traits via [plugins] in daemon.toml.

Extension Points (v0.14.4)

Plugin Registration

Plugins register by name in daemon.toml:

[plugins]
# transport = "ta-transport-websocket"
# auth = "ta-auth-oidc"
# workspace = "ta-workspace-s3"
# review_queue = "ta-review-jira"
# audit_storage = "ta-audit-splunk"

Each value is either a binary name (resolved from $PATH and .ta/plugins/) or an absolute path to a plugin binary. The daemon loads registered plugins at startup and wires them in place of the local defaults.