Optional ReadonlydepthsOptional, separately bounded depth collection. Absent by default.
ReadonlyenabledThe explicit opt-in, deliberately the LITERAL true: an acknowledgement,
not a toggle. enabled: false (or any other value) is refused when
QueuePlugin(...) is called; omit diagnostics instead.
ReadonlyinstanceThe display alias for THIS queue plugin instance. It never derives from
the plugin's name, which is registry topology, so a named instance is
identified only by what the application approved.
ReadonlyqueuesExact job name → display alias allowlist. At most 64 entries; aliases must be unique.
The opt-in queue-observation policy (M98f).
Job names and topology are treated as sensitive: only the exact job names listed in
queuesare observed, each under its approved display alias, and a job name outside the map is neither observed nor counted. Raw job identifiers are replaced by session-localj<N>aliases before anything is retained, and no payload, header, claim token, credential or thrown value is captured."Safe" is a SHAPE, not secret detection: every alias is a string of
1–64UTF-8 bytes containing no control character, and queue aliases are unique. Approving an exact alias IS authorizing its disclosure.Since
0.8.0