DL-649

A plugin with allow_origin_sessions may start a session at a bot-owned Discord thread as plugin:, authorized by its own predicate, never as the operator; every row such a plugin injects, in any session, is a plugin-origin turn that runs in a fresh context with the cotal toolset list and mesh scope, and its approval asks always reach the operator as once/deny cards; no configured bypass or earlier grant skips them

Status: Active (Matt, 2026-11-04)

Record: ../../plugin-origin-sessions.md#q2-plugin-origin-bootstrap