BYOA (github.com/UnixUserDev/byoa) shipped v0.3.0 with an extension layer built as one feature: plugins (~/.config/byoa/plugins, enabled by name only, tools namespaced plugin__task tool, child sessions linked by sessions.parent_id, shown in byoa sessions --tree). Test count went 218 -> 300; DB schema v2. Deliberate trust boundaries documented rather than implied: plugins run in-process with full privileges, MCP servers are host-side and —net deny does not reach them. Supersedes the “BYOA v0.2.0 release status” note.