Validated Manifests
Plugins and themes must pass manifest validation before PostSnail treats them as compatible.
No Arbitrary Execution
Alpha 2 plans hooks and assets declaratively; the Extensions tab supports official bundled plugins only and does not load third-party packages or run arbitrary plugin code.
Private Data
Private plugin state and theme settings stay in the encrypted Shell and are blocked from public ZIP exports.
Public Export Safety
Plugin and theme output still goes through public export safety checks before ZIP generation.