Dummy Post Allow Plugin

Plugin id: dummy_post_allow

Stage: postprocess. Plugin mode may request allow, ask, block, rewrite, or disabled behavior according to the profile/corp plugin config.

Config:

[plugins.dummy_post_allow]
mode = "allow"
detection_level = "informational"

Inputs: any SecurityEvent; tests exercise it after a block has already been requested.

Mutation: requests allow and records a trace marker.

Decision: cannot downgrade an effective block. The decision lattice keeps the highest-severity request.

Detection contract: enabled executions append one plugin detection record to SecurityEvent.detections; disabled executions append none.

Failure: no external I/O; failures should only come from plugin descriptor or profile/corp plugin config errors.

Tests: security_plugin_policy_block_is_absolute_after_later_allow and builtin_dummy_plugins_block_eicar_and_cannot_be_downgraded_by_postprocess.