[Knapp-Kevin]

Closes #586 when merged.

Exact source and accounting

• Registered dynamic-discovery source openai/plugins at 0722921d5542fc593105c27bd52630babd8b8c2a.
• Google Drive 5/5 and Dropbox 6/6 direct first-class packages, each with exact package-tree and SKILL.md blob, skill-path freshness, dependencies, purpose/trigger/non-trigger, authority, controlled tags, score/rationale, and behavioral not-run.
• 11/11 terminal candidate decisions: 5 REFERENCE-ONLY / 6 REJECT unchanged. Official plugin finite intake 128/128 across 18 families → 139/139 across 20 families (56 REFERENCE-ONLY / 83 REJECT unchanged).
• 0 admitted-source denominator delta; 0 new governed provenance/verification pairs; 0 copying, source pin changes, security scans or behavioral runs. Governed 44 / 995 / 1,039, 23 sources, 12 pinned corpora unchanged.

Macro findings

• Google Docs/Sheets/Slides have differentiated native preservation, revision and visual-QA methods but auto-create folders or persist private artifacts; Slides uses source-owned helper code; comments and Drive moves/deletions lack independent action-specific authorization.
• Dropbox deletion, copy/move and link creation have stronger exact-item confirmation, but file-request collection lacks sufficient third-party privacy/retention scope. Read-only search and inspection still require bounded private access.
• Google Drive MIT manifest declaration lacks controlling license text at the pinned scope; Dropbox does not declare a license grant. NOASSERTION for copying; no vendoring.
• Upstream helpers remain upstream evidence, not repository-owned runtime.

Lifecycle and public accounting

All five public surfaces updated atomically in the branch: README, SYSTEM_STATE, CURATION_QUEUE, INDEX, index.json. Also corrected CURATION_QUEUE's stale 119/119 active-frontier tail. Full receipt: docs/reviews/2026-11-01-openai-google-drive-dropbox-eleven-candidate-vetting.md.

Existing drafts #489/#492/#496 remain blocked on pinned external SkillSpector v2.12.0 complete reports and independent executed adversarial acceptance for 36 changed first-party trees; #412/#413 retain separate admission gates. No repository-owned runtime, scripts, CI, scanner, scheduler or generator introduced.