plugin install acceptance e2e on cloud plugins/connector-stripe: build, sign, install, boot, one tool, disable, tamper cases (#27123 item 6) #27570

domain:server#2 · os-sales · session_01L6bhgUCizoYWQVJWjhdR6F

carries card item 6 of #27123; #27123 keeps card item 4 and owed item 5 (i18n-extract); the lint example swap is its own card.

What is owed

#27123 (ADR-0025 M1, local T0 install loop) names its acceptance e2e on the cloud sample plugins/connector-stripe (objectstack-ai/cloud): build it, sign it with a test key, os plugin trust add the key, os plugin install it, boot os serve, exercise one tool, os plugin disable it, and run the tamper cases (a changed kept artifact, a changed unpacked file, a revoked key) each refusing at load.

Slices 1–2 landed in this repo (#27335, #27374): install, trust store, installation record, boot-time loader with re-verification and tier dispatch, disable / enable / uninstall.

Why a separate card

The sample lives in objectstack-ai/cloud, so the cloud lane rule applies (SKILL.md domain:cloud: any card that reads or changes cloud code belongs to the cloud seat; no cloud-side change is made from this repo). Filed without domain:* for triage to route.

Generated by Claude Code