Production audit logger or the explicit development-only opt-out.
OptionaldurableD1 stores used when a connector manifest enables the matching control.
Organization allowlist applied to every connector declaration.
OptionalevaluatorsAdditional deterministic tool-boundary evaluators.
OptionalfetchOptional base fetch used by the connector runtime guard.
OptionalidempotencySet only after legacy connector writers sharing the D1 store are stopped and drained and existing v1 rows have been inventoried.
Trusted host permission-projection wiring.
OptionalwriteOptional organization approval rules. Destructive approval stays on.
Validated inputs for singleTenantConnectorPolicies.