Aegalon Core sits between intent and action. It plans, governs, and only executes what is explicitly allowed — with approvals and audit proof.
If the UI shows a plugin, it must exist and be registered. If a plugin exists, the UI must show it.
Connect, callback, status, disconnect. Anything else is a bypass — and should fail.
Every functional action emits a record: command, plugin id, capability, decision, request id.