OptionalauditOptional audit logger for connector decisions and failures.
OptionalevaluatorsCustom tool-boundary evaluators, run pre-execute after the built-in network-egress gate, in registration order.
OptionalfetchBase fetch the per-call egress guard wraps before handing it to
execute as ConnectorRuntime.fetch (tests inject the vendor mock
here). Defaults to the runtime's global fetch.
OptionalidempotencyStore used when the manifest requires an idempotency key.
OptionalnetworkOrganization allowlist applied to the manifest's declared hosts.
OptionalrateRequired when the manifest declares rateLimit.
OptionalwriteOrganization approval rules for write-class connector IDs.
Org-level policy bindings enforced by the connector's execute wrapper.