Storage subscriptions refuse marketplace caches and append-only streams, and transcripts must name one session.
What's wrong with this entry?
The subscribe path now validates requests and refuses ones aimed at cached plugin-marketplace data or at line-append streams, and only serves transcript subscriptions narrowed to a single session. The check is unconditional.
- Refused: keys or scopes in the marketplace cache namespace, covering the tree, its files and a manifest synthesized from them.
- Refused: subscriptions to line-append streams.
subscriptions to a marketplace tree, its files or a synthesized manifest are not served
Strings lifted out of the shipped bundle, so the claim above can be checked against them.