Check on demand
At install time
Every install and update checks the registry before anything changes: a killed version cannot be resolved at all, and a non-withdrawn critical advisory against the requested version refuses the install. Lesser advisories ride the install response rather than blocking it.The background poll
A running server polls the registry for advisories affecting its installed plugins. The poll is deliberately visible:
At startup the server logs the poll target URL, so the outbound call is never
silent. The poll fetches advisories only — nothing about your server is sent
beyond the request itself. Disable it with one env var:
tai plugins advisories still work —
they are direct requests you make, not background traffic.
See also
- The marketplace model — advisories and the kill switch.
- Install a plugin — the install-time check.
- Config and secrets — how settings resolve.

