OptionalauditOptional audit logger for connector decisions and failures.
OptionalevaluatorsCustom tool-boundary evaluators, run pre-execute after the built-in network-egress gate, in registration order.
OptionalfetchBase fetch the per-call egress guard wraps before handing it to
execute as ConnectorRuntime.fetch (tests inject the vendor mock
here). Defaults to the runtime's global fetch.
OptionalidempotencyExplicit v2 composite-key rollout acknowledgement. Set only after every legacy writer sharing the store has been stopped and drained and legacy rows have been inventoried. Without it, an absent legacy key fails closed instead of racing an old writer that could still create a v1 record.
OptionalidempotencyStore used when the manifest requires an idempotency key.
OptionalnetworkOrganization allowlist applied to the manifest's declared hosts.
OptionalrateRequired when the manifest declares rateLimit.
OptionalwriteOrganization approval rules for write-class connector IDs.
Org-level policy bindings enforced by the connector's execute wrapper.