Covers
jinjunnn/alpha-work#10：插件所有 cloud upload 在上传前取得并提交 Platform 签发的 single-use consent grant，且 manifest 与实际字节严格一致。
Boundary
Plugin upload command/skill manifest、consent request/confirm、grant consumption、retry semantics、tests 与 docs。
Out of scope
Platform grant policy、Web disclosure、旧静默上传或客户端自制 consent flag 兼容。
Design notes and risks
grant 必须绑定 tenant/actor/entry/paths/digests/sizes/purpose/expiry；retry 不得复用已消费 grant 或扩大目录范围。
Exit condition
Merged PR + command wiring/manifest mismatch/retry deterministic checks + docs handled。运行时五入口矩阵归 VERIFY。
Parent
Refs jinjunnn/alpha-work#10
Covers
jinjunnn/alpha-work#10：插件所有 cloud upload 在上传前取得并提交 Platform 签发的 single-use consent grant，且 manifest 与实际字节严格一致。Boundary
Plugin upload command/skill manifest、consent request/confirm、grant consumption、retry semantics、tests 与 docs。
Out of scope
Platform grant policy、Web disclosure、旧静默上传或客户端自制 consent flag 兼容。
Design notes and risks
grant 必须绑定 tenant/actor/entry/paths/digests/sizes/purpose/expiry；retry 不得复用已消费 grant 或扩大目录范围。
Exit condition
Merged PR + command wiring/manifest mismatch/retry deterministic checks + docs handled。运行时五入口矩阵归 VERIFY。
Parent
Refs jinjunnn/alpha-work#10