Registry
One record per plugin, wired to its GitHub repository and release history.
Fleet map
Every installation reports in. Fleet sites, external sites, and copies you didn't authorize.
Kill switch
Authorize a location in one click, or shut the plugin down there — reversibly, with a reason on record.