Mattermost Plugin Architecture: Trust Boundaries and Operational Safety
Mattermost's plugin system uses mediated gRPC over child processes to isolate extensions while keeping the core upgradeable. This architecture note covers trust boundaries, operational checks, failure containment, and the conditions that would force a redesign beyond the plugin SDK.