---
name: 扩展生命周期规则
scope:
  - '*'
products:
  - '*'
id: ka-hard-rule-扩展生命周期规则
asset_kind: hard_rule
lifecycle_status: active
authority: canonical
owner_mechanism_id: mc-extension-contract
routes:
  - code_execution
  - multi_stage_plan
primary_triggers:
  - 扩展注册
  - 权限申请
secondary_triggers: []
negative_triggers: []
priority: P1
specificity: 4
consumes:
  - ka-hard-rule-核心工程执行原则
hard_blocks:
  - 第三方扩展自称 enforced
  - 高风险权限未审批
  - 生命周期跳跃转移
fallback: manual_required
required_evidence:
  - extension_manifest
  - permission_approval_record
version: 1.0.0
last_reviewed: '2026-05-24'
---

# 扩展生命周期规则

## 硬规则

1. **第三方扩展不可自称 enforced** — 只有内置机制可以是 enforced 状态
2. **高风险权限必须审批** — 文件写入、命令执行等权限需显式授权
3. **生命周期转移必须合法** — registered → active → disabled → removed，不可跳跃

## 检查项

- [ ] 扩展 manifest 格式正确
- [ ] 权限声明完整
- [ ] 生命周期转移合法
