This is the same catalog the app installs from — a static, signed registry. Every entry is ed25519-signed and verified against a key embedded in the app; files are checked against SHA-256 before anything touches your disk.
Raw catalog: registry/plugins.json
⋯ → 🧩 Plugins → tab 🛒 Marketplace.Updates show up in the same tab as an Update button when a newer version is published. Plugins run fault-isolated in a worker thread and can't read your vault or secrets — but they are trusted code: the catalog only lists signed entries.