João Henrique
b541f502ba
- Adicionado estrutura completa do projeto - Configurado MCP server para Premiere Pro - Adicionado documentação e skills - Configurado Gitignore para o projeto
1.1 KiB
Executable File
1.1 KiB
Executable File
Recommendation 30: signed host capability attestation
Evidence
Adobe documents host and UXP runtime version inspection, while Premiere APIs declare minimum versions per method. Static package declarations can therefore differ from the connected runtime.
Proposed improvement
Have the authenticated panel produce a nonce-bound capability attestation containing host version, UXP version, plugin build hash, probed stable methods, and timestamp. Bind it to the current WebSocket connection and expire it quickly.
Acceptance criteria
- Replayed, expired, cross-connection, and mismatched-build attestations are rejected.
- Probes are read-only and bounded.
- Tool discovery uses the attested intersection, not package-version assumptions.
- Diagnostics distinguish declared, probed, and live-verified capability.
Attestation proves what the panel observed, not that a later host operation succeeded.