[Knapp-Kevin]

Closes #560 after merge.

Macro-first bounded source vetting

• Official registered openai/plugins observed revision 0722921d5542fc593105c27bd52630babd8b8c2a, proprietary product-design plugin v0.1.52.
• Exact finite candidate denominator: 10/10 first-class skills, individual Git blob + package tree identity, per-skill utility rationale, dependencies, authority/privacy/portability, trigger boundaries and explicit not-run security/behavioral states.
• 2 REFERENCE-ONLY / 8 REJECT unchanged, 0 admissions, 0 new semantic review pairs, 0 source pin changes, 0 admitted denominator delta.
• Macro findings: automatic private context preflight and ImageGen disclosure, unscoped private connector reads, live browser interaction, source-asset copying without rights, local dependency/project writes and deployment/visibility/cost authorization. Useful source-vs-rendered design QA and visual-selection methods preserved as reference.
• 6 passive files: dated review plus README, SYSTEM_STATE, CURATION_QUEUE, INDEX, index.json. Counts 44 / 995 / 1039, registered sources 23, pinned corpora 12, unchanged.
• No source code, third-party files, scripts, runtime, CI, scanner, scheduler, deployment, or test execution added. All upstream tools are source-owned reference material.

Lifecycle gate

Five pre-existing drafts #489/#492/#496/#412/#413 are qualification-held, not made merge-ready by this review. No other concurrent lane touched. Review issue #560 can close after this PR merges.

Verification

Single commit 7350818cb56f83891faa6ebaf0d7bf49406668de based on main 19856e29b43596836c842edc49df3e096e1d0833; six-file diff inspected, ten candidate rows counted, JSON parsed and count invariants checked. This is source-vetting only, not a package-security or behavioral pass.