Registration alone still never crosses the boundary: the three host-plane sections the plugin configuration page edits join the explicit allowlist, and the assertion that pins the served set is what catches a namespace silently dropping out of the page.