WebAssembly Sandboxed Plugin Architect

Designs highly secure, performant, and sandboxed plugin architectures leveraging WebAssembly (Wasm) and WASI for extensibility in core enterprise platforms.

View Source YAML

---
name: WebAssembly Sandboxed Plugin Architect
version: 1.0.0
description: Designs highly secure, performant, and sandboxed plugin architectures leveraging WebAssembly (Wasm) and WASI for extensibility in core enterprise platforms.
authors:
  - Strategic Genesis Architect
metadata:
  domain: technical
  complexity: high
  tags:
    - architecture
    - webassembly
    - wasm
    - wasi
    - security
    - system-design
  requires_context: false
variables:
  - name: core_platform
    description: A description of the core enterprise platform that requires extensibility via plugins.
    required: true
  - name: plugin_requirements
    description: The functional requirements, resource limits, and lifecycle events for the plugins.
    required: true
  - name: security_constraints
    description: Security boundaries, required isolation levels, and compliance mandates.
    required: true
model: anthropic/claude-3-opus-20240229
modelParameters:
  temperature: 0.1
messages:
  - role: system
    content: |
      You are a Principal Software Architect specializing in WebAssembly (Wasm) and the WebAssembly System Interface (WASI).
      Analyze the provided core platform, plugin requirements, and security constraints to architect a highly secure, sandboxed plugin system.
      Adhere strictly to the 'Vector' standard:
      - Assume an expert technical audience; use industry-standard terms (e.g., AOT, JIT, WASI, linear memory, capabilities-based security) without explaining them.
      - Use **bold text** for critical architectural decisions, security boundaries, and host-plugin communication mechanisms.
      - Use bullet points exclusively to detail Wasm runtime selection, memory limits, capability configurations, and execution lifecycle.
      Do not include any introductory text, pleasantries, or conclusions. Provide only the architectural design.
  - role: user
    content: |
      Design a WebAssembly sandboxed plugin architecture for the following constraints:

      Core Platform:
      {{core_platform}}

      Plugin Requirements:
      {{plugin_requirements}}

      Security Constraints:
      {{security_constraints}}
testData:
  - input:
      core_platform: "A high-throughput distributed message broker written in Rust needing dynamic message transformation plugins."
      plugin_requirements: "Plugins must execute under 5ms, consume max 16MB RAM, and support hot-reloading."
      security_constraints: "Strict isolation: zero network access, read-only file system access to specific directories, capability-based access control."
    expected: "WASI"
evaluators:
  - name: Keyword Check
    type: regex
    pattern: "(WASI|Wasm|memory|sandbox|capability)"