Project protocol

Ownership

A workflow may declare [dispatch] independently of its phase graph: roles lists exact local or provider/role identities, isolated requires a separate context, and boolean inline_workers binds only this plugin's canonical isolated-worker. That binding requires a hard provider dependency and isolation. It accepts a concrete task and report contract without exposing other registry roles. Loaded methods retain their domain prompts; metadata carries no prompt.

This leaf owns operational records and their validation. Canonical contracts are ${CLAUDE_PLUGIN_ROOT}/contracts/work.toml and ${CLAUDE_PLUGIN_ROOT}/contracts/project-result.toml. Consumers declare those exports by provider/path in contract.shared_schemas; they never copy them. Review findings, severity and native dispositions remain the domain owner's payload. A common result references the original report, its hash, its author, its input snapshot and the adapter that interpreted it.